dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.