automatically handle "secure_serial: not exact" in receive_secure_serial

named should automatically handle errors in receive_secure_serial by generating a diff against the current raw zone and the signed zone contents sans DNSSEC records.