allow DS with key trust anchors

Now that key-style trust anchors are converted internally into DS records, there's no need to keep the code that prevents the two types from being used for the same name.