Make allowed maximum NSEC3 iterations a policy parameter.