The dnssec and nsupdate system tests need to be adjusted to accept a lower maximum value for NSEC3 iterations.