There is no way to have no dnssec-policy.

bin/named/config.c has dnssec-policy "none"; which turns on kasp for every zone even those being externally managed.

Edited Mar 30, 2021 by Mark Andrews

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information