zone "example.com" { type primary; file "primary/example.com"; dnssec-policy "kskzsk"; update-policy local; inline-signing yes; };