Redo NSEC3 whitelies proof

The ce is the qname minus the left most label.
The nc is the qname
And the wildcard record will be *.ce

This will generate more NSEC3 records, but with caching this should just
work.
Fix the test.

Actually check the Ns and Extra sections.
Fixup all the tests to pass with this fix.
Create NSEC3 tests, now it that it is working.
Further fix in the tests for NSEC3

Add more NSEC3 checks: NXDOMAIN and NODATA.

Closes #3