add NSEC3 support