Pass nameserver and keyfile both to dig and nsupdate

Pointed out by Uli Martens