rename key1 to tsig1 to clearly identify this name as a transaction signature digest; consistently use tsig key name on slave zone. ok jakob@