pdnssec hsm assign and create-key