kasp: Purge deleted keys
Add a configuration option for dnssec-policy to purge deleted keys.
purge-keys duration will purge deleted keys after the given duration. 0 means it may directly purge deleted keys. Set to off|disabled to never purge deleted keys. Default off.