added config doc and checks for files in GSS-TSIG

When the broker attempts to create a Nsupdate plugin DNSService object using GSS-TSIG it must specify and be able to read the KRB5 keytab file.

This patch causes the DNS plugin to check for the presence and permissions of the keytab file if it is specified.

This will provide better diagnostics for broker setup.