webserver: make unsigned zones work with dnssec=on
webserver: implement POST /../zones/<id>

Unify master/masters to masters on the way.