Use tsig parameter for dig, too.

Add the tsig_param when invoking dig using the -y command line option. This
allows dig and nsupdate to operate in the same view when views are matched by
tsig signature.

lib/puppet/type/dns_rr.rb

@@ -7,7 +7,7 @@ Puppet::Type.newtype(:dns_rr) do
     desc "Class/Type/Name for the resource record"
 
     validate do |value|
-      if (value =~ /^([A-Z]+)\/([A-Z]+)\/[a-zA-Z0-9.-]+$/)
+      if (value =~ /^([A-Z]+)\/([A-Z]+)\/[a-zA-Z0-9._-]+$/)
         rrclass = $1
         if ( !%w(IN CH HS).include? rrclass )
           raise ArgumentError, "Invalid resource record class: %s" % rrdata