reported as "covering nsec returned" when dumping cache stats and as "CoveringNSEC" in json and xml cache statistics.