BINDMgr: use "rndc sign" instead of "rndc loadkeys"

loadkeys does not enforce immediate zone signing