Never mind - didn't see the SETTING.dns_tsig_keytab.