s4 dns: Handle GSS-TSIG signatures