Douglas Hunley has just updated http://www.linux-sxs.org/bind9.html to incorporate the following: updated to use dnssec-keygen instead of mencode