make sure NS is listed as an extant type in NSEC for non-authoritative NS entries