kerberos.realm zone: ns1; toplevel in SOA zone: contact address in SOA