[dnssec] keymgr, implement zone key generating