While ago when samba ports needed specially compiled version of nsupdate with enabled GSS-TSIG feature I've just created a separate port for it, samba-nsupdate.
I find it's a duplicate effort to maintain such a separate port and think it's beneficial to make it slave port of the dns/bind* port. Such an addition requires some changes in the dns/bind-tools and dns/bind912 ports.