Add a 'dnssec' field in the zonelist

So we do not need to fetch the whole zone to find out if we have dnssec.