Update auto-dnssec documentation

Explain that 'auto-dnssec' may only be activated at zone level.

(cherry picked from commit aac39647)

Closes #3023 (closed)