for BIND NSEC, also work if RR list is not paran'd