When migrating keys to dnssec-policy, if a zone has only one key,
assume it is going to be a CSK.
(cherry picked from commit 3ea953512a)
When migrating keys to dnssec-policy, if a zone has only one key,
assume it is going to be a CSK.
(cherry picked from commit 3ea953512a)