Implement DNS-over-TLS support for nsupdate. Use DiG's DoT implementation as a model for the newly added features.