nsd.conf wasn't properly using the signed zone files