**What would you like to be added**: Add TSIG support to *secondary* plugin:The secondary plugin should sign and verify transfer requests/responses when TSIG is configured. This is a followup to-do from the initial _tsig_ plugin PR https://github.com/coredns/coredns/pull/4957#issuecomment-992852683