Automate DNSSEC key rotation for both ZSK KSK