replay protection requires both rndc and named to be updated. Partial replay protection (limited exposure after restart) is provided if just named is updated.