The 'update-nsec3.example' requires to be DNSSEC maintained via dynamic update. Commit 03b22983cd20cec51ad8b9f25f2e7d0e472dc79c adds checks to make sure the raw zone is not signed. So the test case neesd to be updated to allow for DNSSEC maintenance.