setup-trust: Move dnszone addition before time synchronization