inactivate dnssec, bind-keys-file and zone hint for bind server