[dnssec] KASP, update documentation in header
[dnssec] simplify PKCS 11 placeholder non-implementation
[dnssec] keystore, separate ctx init, init, and open
[dnssec] update tests to reflect updated keystore API
[dnssec] update tools and server to use new keystore API
[dnssec] keymgr: base code for key store access