.IR config ]
.RB [ \-k | \-\-keyfile
.IR keyfile ]
-.RB [ \-K | \-\-keyfile-ro
+.RB [ \-K | \-\-keyfile\-ro
.IR keyfile ]
.RB [ \-m | \-\-moduledir
.IR path ]
The file contains DNSKEY/DS records in presentation format,
and is compatible with Unbound and BIND 9 root key files.
.TP
-.B \-K\fI keyfile\fR, \fB\-\-keyfile-ro=\fI<keyfile>
+.B \-K\fI keyfile\fR, \fB\-\-keyfile\-ro=\fI<keyfile>
(Discouraged) Static root trust anchors file. The file is not updated by kresd. Use of this option is discouraged because it will break your installation when the trust anchor key changes!
Default: "@KEYFILE_DEFAULT@" (can be empty if your distribution did not provide one)