NSEC proves next existing name.
NSEC3 hashes owner names to reduce zone walking exposure.
