add secure-all-zones command to pdnssec