Ghost User
--- a/src/knot/dnssec/zone-nsec.c
+++ b/src/knot/dnssec/zone-nsec.c
 	return true;
 }

+static int mark_nsec3(knot_rrset_t *rrset, void *data)
--- a/src/knot/dnssec/zone-nsec.c
+++ b/src/knot/dnssec/zone-nsec.c
+			knot_node_set_removed_nsec(node);
+		}
+	}
+
+	return KNOT_EOK;
+}
+
+static int mark_removed_nsec3(knot_changeset_t *out_ch,
+                             const knot_zone_contents_t *zone)
+{
+	if (zone->nsec3_nodes == NULL) {
+		return KNOT_EOK;
+	}
+
+	int ret = knot_changeset_apply(out_ch, KNOT_CHANGESET_REMOVE,
+	                               mark_nsec3, (void *)zone->nsec3_nodes);