DNSSEC: separate private key structure from signing context

This allows creating of multiple signatures without reloading the key
every time when a new signature is needed.

refs #2413

Change-Id: I1392a6a697e9a599eaceee21dbe4410ae01c6f46