Fix NSEC/NSEC3 signature verification