wow, I wish I had noticed @BastilleBSDBastilleBSD tags sooner, this solves so many issues that nuidns has under the hood that made the code complex, hard to follow, and harder to install.

My DNS servers live on Intel NUCs at either end of my house. These devices also house my DHCP servers in bastille managed jails. This means I can't use the ALL keyword for any operations.

So, for example on the destroy script, I was doing:
bastille stop ns1
bastille destroy ns1
bastille stop ns2
bastille destroy ns2
etc....

Now, with tags, it is just two commands:

bastille stop nuidns
bastille destroy nuidns

The create scripts are significantly simpler now as well. I have just a few pieces of per host specific configuration I need to generalize somehow.

I'm much closer to my goal of releasing this beast for the world.