Add checkconf check for dnssec-policy keys algorithm

So that this will not be accepted

        keys {
                ksk lifetime unlimited algorithm 8 2048 ;
                zsk lifetime 30d algorithm 13;
        };