add test for ent which is only derived from an insecure delegation
add .bind zones to .gitignore
pdnssec: fix ent generation for insecure delegations