dnssec-keymgr is not included in the distribution since BIND 9.17 so there is no point in keeping usage instructions around.