return value for check DS shadows value for running keymgr

Checking the DS at the parent only happens if dns_zone_getdnsseckeys() returns success. However, if this function somehow fails, it can also prevent the keymgr from running.