NMAP-like tools will identify your server version to anyone who wants to know. So you may as well just speak the truth in your VERSION.BIND answers, so that your own people won't have to use NMAP-like tools for internal auditing.