1980. [func] dnssec-signzone: output the SOA record as the first record in the signed zone. [RT #15758]