freebsd: don't use `-f' in hostname
-BIND9: `bak' must be owned by the bind user
+DNSSEC:
+- DS records and dependencies on them
+- NSCVER macro
+- in reverse zones, file name != zone name => need to pass zone name to genzone
+- dependencies on resign-stamp