DNSKEY_BIT_ZSK
if(!(kd_get_flags(d, i) & DNSKEY_BIT_ZSK))
if(!(dnskey_get_flags(dnskey, dnskey_idx) & DNSKEY_BIT_ZSK)) {
s->flags = DNSKEY_BIT_ZSK; /* to enforce signing */
if(!(kd_get_flags(d, i) & DNSKEY_BIT_ZSK))
if(!(dnskey_get_flags(dnskey, dnskey_idx) & DNSKEY_BIT_ZSK)) {