Add nslookup. Research & prevent invalid ds-keynames

Leading to a bugreport here https://github.com/hughsk/flat/issues/6