Sending a TSIG signed query with a TSIG algorithm that's not HMAC-MD5.SIG-ALG.REG.INT shouldn't crash the server. Also, the description of dns_tsigkey_create was wrong in at least one place, and the function incorrectly returned an undocumented result.