run dsa-check-zone-signature-all