Don't add signing records for DNSKEY added with dynamic update
We removed DNSSEC management via dynamic update (see issue #3686 (closed)), this means we also should no longer add signing records (of private type) for DNSKEY records added via dynamic update.