Add allow-update block

This patch adds declaring arbitrary allow-update statements (just like allow-transfer) to master zones