resolver-conf: DNSSEC rootkey update
This is a meta issue. It's possible that DNSSEC root key will be rotated more frequently (once per year). Right now we ships omnia/mox with enabled DNSSEC.
In case that someone will buy the version with an older firmware, auto-update function will not be possible because DNSSEC validation will fail. We should discuss a possible solution here. cc @jschlehofer @kkoci @mhrusecky