kresd accepts DS records in root keys if provided,
it will eventually replace them with DNSKEY in
automatic mode