NSECx optimizations

Generate the NSECx records with around 20% fewer database queries.

PowerDNS "knows" when the NSECx is matching the record, so there is no need to query the database for this part of the NSECx