/usr/sbin/dnssec-keyfromlabel