BIND import works for nearly all RRs except DNSSEC