DNSSEC test is broken

Job #4407447 failed for fded7775:

updatecheck-kskonly.secure is scheduled to rollover in the current second which happens before the UPDATE is processed but the tests are looking for signatures from the just rolled over DNSKEY.

2024-06-11 03:04:12 INFO:dnssec.test_dnssec     I:checking CDS RRset is signed with KSK only, KSK offline (279)
2024-06-11 03:04:12 INFO:dnssec.test_dnssec     I:checking SOA RRset is signed with new ZSK 26995 only, KSK offline (280)
2024-06-11 03:04:12 INFO:dnssec.test_dnssec     I:checking TXT RRset is signed with new ZSK 26995 only, KSK offline (281)
2024-06-11 03:04:12 INFO:dnssec.test_dnssec     I:put back the KSK 35028 for zone updatecheck-kskonly.secure from disk
2024-06-11 03:04:12 INFO:dnssec.test_dnssec     I:delete old ZSK 3831, schedule ZSK 26995 inactive, and new ZSK  active for zone updatecheck-kskonly.secure (282)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:ns2 Key 26995: Rollover scheduled on 11-Jun-2024 03:04:13.000
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:remove the KSK 35028 for zone updatecheck-kskonly.secure from disk
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:update the zone with updatecheck-kskonly.secure IN TXT nsupdate added me again
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:checking DNSKEY RRset is signed with KSK only, old ZSK deleted (283)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:checking CDNSKEY RRset is signed with KSK only, old ZSK deleted (284)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:checking CDS RRset is signed with KSK only, old ZSK deleted (285)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:checking SOA RRset is signed with ZSK 26995 only, old ZSK deleted (286)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:failed
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:checking TXT RRset is signed with ZSK 26995 only, old ZSK deleted (287)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:failed
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:put back the KSK 35028 for zone updatecheck-kskonly.secure from disk
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:make new ZSK 19988 active for zone updatecheck-kskonly.secure (288)
2024-06-11 03:04:13 INFO:dnssec.test_dnssec     I:wait until new ZSK 19988 active and ZSK 26995 inactive
2024-06-11 03:04:24 INFO:dnssec.test_dnssec     I:failed
2024-06-11 03:04:24 INFO:dnssec.test_dnssec     I:remove the KSK 35028 for zone updatecheck-kskonly.secure from disk
2024-06-11 03:04:24 INFO:dnssec.test_dnssec     I:update the zone with updatecheck-kskonly.secure IN TXT nsupdate added me one more time
2024-06-11 03:04:24 INFO:dnssec.test_dnssec     I:failed