Check zonefile is untouched if dnssec-policy none

Make sure no DNSSEC contents are added to the zonefile if dnssec-policy is set to "none" (and no .state files exist for the zone).

Check if zone file is referenced more than once when dnssec-policy is used.

Closes #2603 (closed)