Use tsig parameter for dig, too.

Add the tsig_param when invoking dig using the -y command line option. This
allows dig and nsupdate to operate in the same view when views are matched by
tsig signature.

lib/puppet/provider/dns_rr/nsupdate.rb

@@ -107,7 +107,12 @@ private
 
   def query
     unless @query
-      @query = dig("@#{server}", '+noall', '+answer', name, type, '-c', rrclass).lines.map do |line|
+      if keyed?
+        dig_text = dig("@#{server}", '+noall', '+answer', name, type, '-c', rrclass, '-y', tsig_param)
+      else
+        dig_text = dig("@#{server}", '+noall', '+answer', name, type, '-c', rrclass)
+      end
+      @query = dig_text.lines.map do |line|
         linearray = line.chomp.split(/\s+/, 5)
         {
           :name    => linearray[0],