KASP was using 'signatures-validity-dnskey' instead of 'signatures-validity'. (cherry picked from commit ad63e9e4f8)
ad63e9e4f8