pick up non-optout insecure delegations as well (nsec3)
improve signed zonefile readability
actually add insecure delegations
automate graphviz plotting