dnssec-signzone should sign a zonefile that contains a DNSKEY record with an unsupported algorithm. (cherry picked from commit 6d976b37) (cherry picked from commit 8619318a)