dnssec: use RSASHA256 keys for .email domains