pub fn ensure_nsec_string() -> Result<(String, bool)>
Get nsec string, ensuring it exists (generate if needed) Returns (nsec_string, was_generated)