don't generate or check extra NS in additional
Some authoritatives don't return them (answer minimization). And kresd now won't put them into answer even in wildcarded cases. This change will work with resolvers that behave either way.
Edited by Vladimír Čunát