Fixed example in NSEC zone enumeration, also added a word about using split DNS