swap NSEC3 rr 2 and 3