Avoid opt-out flag in dnssec-signzone examples

Since !6413 we discourage opt-out, so we should not be advertising it in
the examples. Even worse, it was just thrown into the command line
without even mentioning its meaning in the surrounding text.

Related: !6413
(cherry picked from commit beae857288b52ee555bdf41491c5aa2eec390c10)

diff --git a/doc/dnssec-guide/signing.rst b/doc/dnssec-guide/signing.rst
index 6adb9f017471d3aa0d270133f9135d43f5e4a08b..7fb8e147deba5d437d5d5a48063a80fb73dbc862 100644 (file)
--- a/doc/dnssec-guide/signing.rst
+++ b/doc/dnssec-guide/signing.rst
@@ -1402,7 +1402,7 @@ it is in a file called ``zone.child.example``, using manually specified keys:
 .. code-block:: console
 
    # cd /etc/bind/keys/example.com/
-   # dnssec-signzone -A -t -N INCREMENT -o example.com -f /etc/bind/db/example.com.signed.db \
+   # dnssec-signzone -t -N INCREMENT -o example.com -f /etc/bind/db/example.com.signed.db \
        /etc/bind/db/example.com.db Kexample.com.+013+17694.key Kexample.com.+013+06817.key
    Verifying the zone using the following algorithms: ECDSAP256SHA256.
    Zone fully signed: