dnssec-anchors: make root.key a conf file.
unbound: use dnssec-anchors.