AXFR-in: fix ent generation for insecure delegations