Add return code for dnssec-signzone: fatal: No non-KSK DNSKEY found; supply a ZSK or use '-z' message.