plugins/dns/nsupdate: Support unauthenticated use

Modify the nsupdate DNS plug-in to support unauthenticated DNS updates by omitting the key and gsstsig commands if neither a key nor a Kerberos principal is specified.