Nsec3optout

PowerDNS now does normal NSEC3 and NSEC3 opt-out.

It is possible to switch between NSEC3 and NSEC3 opt-out:

Set NSEC3 opt-out -> pdnssec set-nsec3 zone.tld '1 1 1 abcd' 
Set NSEC3 -> set-nsec3 zone.tld '1 0 1 abcd' 

After a switch you need to rectify your zone!