Pull up James Dempsey's fix: Remove DNSKEY keytag uniqueness assumption (RFC 4034, section 8)