Only add the DNSKEY records in dnssec mode