if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned with one or more DNSKEY algorithms. [RT #46774] (cherry picked from commit 00f5ea91cf)
00f5ea91cf