When the FIPS provider is available, RSASHA1 signing keys for zone "example.com." are ignored if the zone is attempted to be signed with the dnssec-signzone "-F" (FIPS mode) option: "fatal: No signing keys specified or found"