Allow dnssec key algorithm to be specified

Allow dnssec key algorithm to be specified instead of hardcoding HMAC-MD5. The
default value remains HMAC-MD5.
I didn't make it a parameter because it was used only in a warning message. Another approach would be to have a lookup table that matches algorithms to default key sizes.