Enable DNSsec on our secondaries