dnssec-policy "simple_alg15" {
    dnskey-ttl 7200;
    keys {
        csk lifetime unlimited algorithm ed25519;
    };
    nsec3param iterations 0 optout no salt-length 0;
};