dnssec-policy "ed448" {
        dnskey-ttl 1234;

        keys {
                ksk key-directory lifetime P10Y algorithm 16;
                zsk key-directory lifetime P5Y  algorithm 16;
                zsk key-directory lifetime P1Y  algorithm 16 456;
        };
};

zone "ed448.kasp" {
        type primary;
        file "ed448.kasp.db";
        dnssec-policy "ed448";
};