listen-on tls ephemeral will cause named to create an ephemeral TLS self-signed certificate and key, stored only in memory.