BIND dnssec-policy currently only supports CDS digest-type 2. Add API functions to allow other digest-types.