within the base64 data.  This makes it possible
                        to break up the key data in a trusted-keys
                        statement into multiple lines. [RT #284]

add up to 10 minutes of jitter for refresh/retry, clammed as:  RETRYTIME >= actual_retry >= RETRYTIME * .80

chapter 1.

Applied patch from Michale Graff for the min & max refresh & retry
boolean options table in 6.2.12.1

restructure creating and cleanup to more closely fit the other subsystem's methods.  This removes one more todo item from my list.

                        was 2 bytes too short, leading to message
                        generation failures.

                        gets a negative response to a key query where the
                        records are signed by the missing key.

                        cause dnssec-keygen to dump core.

These files are based on the BIND v9 ARM in FrameMaker. After these
files are edited they will become the master source for the BIND v9 ARM.

Still need to include style sheets and the actual XML DocBook DTD
for those who do not have it.

static function

zone's signedkey file has keys that don't match the zone.

                        w/ two SOA records for the zone (illegal). [RT #279]

so that we can detect cases where the user fails to call dns_rdataset_first()
before calling dns_rdataset_current()

Add the ablility to specify the source address to request