why not have a tsig class < nsupdate ?