Add built-in dnssec-policy "insecure"
Add a new built-in policy "insecure", to be used to gracefully unsign a zone. Previously you could just remove the 'dnssec-policy' configuration from your zone statement, or remove it.
Closes #2645 (closed)
Edited by Matthijs Mekking