Add normal NSEC3 (non opt-out) support.