Evan rightly suggested on Jabber that this should be fixed properly by
regenerating the presigned zone with NS records different than the ones
for the root zone.