[master] complete NTA work

3882.	[func]		By default, negative trust anchors will be tested
			periodically to see whether data below them can be
			validated, and if so, they will be allowed to
			expire early. The "rndc nta -force" option
			overrides this behvaior.  The default NTA lifetime
			and the recheck frequency can be configured by the
			"nta-lifetime" and "nta-recheck" options. [RT #36146]

bin/tests/system/dnssec/ns3/named.conf

@@ -68,6 +68,12 @@ zone "bogus.example" {
 	allow-update { any; };
 };
 
+zone "badds.example" {
+	type master;
+	file "badds.example.db.signed";
+	allow-update { any; };
+};
+
 zone "dynamic.example" {
 	type master;
 	file "dynamic.example.db.signed";