Allow dnssec key algorithm to be specified

Allow dnssec key algorithm to be specified instead of hardcoding HMAC-MD5. The
default value remains HMAC-MD5.
I'm unsure about lowering the keysize here.