All dnssec-policy configurations are here, so why not this one? (cherry picked from commit 93326e3e18)
93326e3e18