Add a system test for testing dnssec-ksr, initally for the keygen command. This should be able to create or select key files given a DNSSEC policy and a time window.