log when a key is: - published in the DNSKEY rrset - activated - deactivated - unpublished from the DNSKEY rrset - revoked