[dnssec] keymgr, do not overwrite existing zone on 'zone add'
test framework: pass output from Keymgr.run_check()
test framework: import keys into KASP only if they are not already there