Update dnssec

re-sign is for single domain re-sign-all is for all previously signed zones