api: use uncached results for getKeys()
api: show keys for zones without active ksk
only zones with an active ksk are secure