The nsec-only.example zone was not converted as we use it to test nsec-only DNSSEC algorithms to nsec3 conversion failure. The subtest is skipped in fips mode. Update "checking revoked key with duplicate key ID" test to use FIPS compatible algorithm.