add tsig.com to verify-dnssec-zone