Check the OID in PRIVATEOID keys
PRIVATEOID keys (algorithm 254) are supposed to have a valid OID at the start of the key data. Check that this is well formed. This is a prerequisite to printing out the OID with
dig +rrcomments similarly to how the algorithm name in printed out for PRIVATEDNS.