A bit more cleanup in the dnssec-keygen manual

Oops, in !1557 (merged) I missed a couple of paragraphs towards the end of the man page that also needed updating