it's always NULL because it cannot be configured with TSIG keys. it should be done in a separate ticket.