[dnssec] API: generic circular lists with clean API
[dnssec] replace kasp keyset with new list
[dnssec] fix sample utilities
[dnssec] keymgr: base for KASP zone listing
dnssec: new keyset API for key loading
configure: add cflag to fail on implicit declaration