tsig: fix packet reservation size

Maximum TSIG wire size is reached only in empty error response with BADTIME.
In most cases reservation of such a size led to early truncation.