NS records aren't checked at all

[tomperrine]

NS records should be checked and if they point to a name, make sure the name is in the zone file (if same domain)

other NS checks needed, too