fix NSEC3s for DS no data (mode 1)
Merge branch 'ds-nsec3' of github.com:mind04/pdns into mind04-ds-nsec3
avoid compile error when not using --verbose-logging
fix presigned negated check
white space cleanup in [db]dnsseckeeper.{hh,cc}
use zname for zone name in [db]dnsseckeeper.{hh,cc}
fix DNSSECKeeper::isSecuredZone: use same check in cache hit and cache miss paths
DNSSECKeeper: separate retrieving (filtered) key list from updating cache; set d_isSecure flag while updating cache and use it
support zones with offline KSK (DNSKEYs presigned) (fixes #481)
Use same DNSKEY handling for AXFR queries as for DNSKEY queries

* AXFR is ordered manually; group DNSKEYs (needed for RRSIGs)
* only pull DNSKEY records from backend if DNSKEY query would have done it too
  (no private keys or KSK offline or experimental-direct-dnskey=yes)
* ANY still always adds DNSKEY records from backend