Alphabetize options and synopsis; remove spurious -z from synopsis; refer to -T KEY in options that are only relevant to pre-RFC3755 DNSSEC, and add a -f KSK example. (cherry picked from commit 1954f8d2bf)
1954f8d2bf