Signatures loaded from the secure journal of an inline-signed zone are never refreshed
DNS_JOURNALOPT_RESIGN is not set when journal rollforward is performed for the signed version of an inline-signed zone, which prevents scheduling refresh events for signatures loaded from that journal.
Note that under certain circumstances (e.g. signing keys not being available when inline signing is first enabled for a zone), this issue may affect records at the zone apex.