without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]

                        [RT #21610]

                        DNAME at the zone apex.  [RT #21610]

                        that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]

                        current NSEC3PARAM record in use for zone named
                        could dereference a uninitialised pointer attempting
                        to obtain a lock. [RT# 21868]

(a regression in rt21818)

exist anymore.