+ --- 9.9.5rc1 released ---
+
3701. [func] named-checkconf can now obscure shared secrets
when printing by specifying '-x'. [RT #34465]
- When re-signing a zone, the new "dnssec-signzone -Q" option
drops signatures from keys that are still published but are
no longer active.
+ - "named-checkconf -px" will print the contents of configuration
+ files with the shared secrets obscured, making it easier to
+ share configuration (e.g. when submitting a bug report)
+ without revealing private information.
BIND 9.9.4