Explicit inline-signing for dnssec-policy

Having implicit inline-signing set for dnssec-policy when there is no update policy is confusing, so lets make this explicit.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information