Selecting a dnssec algorithm should imply wanting to sign the zone, #6451 Closes #6451 See merge request !1688