The new 'dnssec-policy' was already compatible with multi-signer model 2, now we also have a test for it.