merge the dnssec changes into gen-zones, handle errors a bit better, add info on which modules you need