Allow dnssec key algorithm to be specified

Allow dnssec key algorithm to be specified instead of hardcoding HMAC-MD5. The
default value remains HMAC-MD5.
Instead of just lowering the keysize, I would feel better if we added a parameter to specify the keysize.