Add shdrop to named.conf.local. Incremental on adding nsupdates of shtrop