Add NSEC infrastructure

Lots of new types to support NSEC.