specified, the limit is set according to the ``transfers-per-ns``
option.
-.. namedconf:statement:: keys
-
+``keys``
The option identifies a ``key_id`` defined by the ``key``
statement, to be used for transaction security (see :ref:`tsig`)
when talking to the remote server. When a request is sent to the remote
This indicates the TTL to use when generating DNSKEY resource
records. The default is 1 hour (3600 seconds).
-.. namedconf:statement:: keys
-
+``keys``
This is a list specifying the algorithms and roles to use when
generating keys and signing the zone. Entries in this list do not
represent specific DNSSEC keys, which may be changed on a regular