fixed: DNS keys did not quite work for both bind and ndwatch.