bind - add inline-signing dnssec option