don't expect TSIGs on *XFR responses if we didn't TSIGn the request; if TSIG is used, it is required on the first message of the response
don't expect TSIGs on *XFR responses if we didn't TSIGn the request; if TSIG is used, it is required on the first message of the response