Add the tsig_param when invoking dig using the -y command line option. This allows dig and nsupdate to operate in the same view when views are matched by tsig signature.