AXFR-in can handle secure and insecure NSEC3 optout delegations
AXFR-out can handle secure and insecure NSEC3 optout delegations