DNSSEC: move RR set signing into separate module

Slight cleanup and API changes included.

refs #4
DNSSEC: add doxygen comments to zone signing API

refs #4