- dig command had the @ parameter in the wrong place - private-dnskey and private-cdnskey are queried in a separate loop, which strips 'private-' from the name to determine the qtype (cherry picked from commit bc7b34d6)