correct serials. Mainly inspired by
https://github.com/ajjahn/puppet-dns/issues/24