zone "example.com" {
  type primary;
  file "example.com";
  dnssec-policy default;
  inline-signing yes;
};