DNSSEC key manager