Laptop:/etc/dhclient.conf

send fqdn.fqdn "pinkje.secret-wg.org."; # what is my fqdn
send fqdn.encoded on;         # send in dns wire format
#send dhcp-lease-time 60;
send fqdn.server-update off;  # tell dhcp srv not to hack A

# tsig key shared with forward dns server
#

key pinkje.bert.secret-wg.org. {
    algorithm HMAC-MD5;
    secret
    "icÉ==";
};
# tell which key
#
zone secret-wg.org {
    primary 193.0.0.4;
    key pinkje.bert.secret-wg.org.;
}

Nameserver:/etc/named.conf:

zone "secret-wg.org" {
       type master;
       file "zones/secret-wg.org.signed";
       notify yes;

        allow-transfer { key tsig.secret-wg.org.; };
       update-policy {
       grant  pinkje.bert.secret-wg.org. name pinkje.secret-wg.org ;
       };
};