version: 0.17+repack-3 tag: pending I have a new version (hopefully uploaded successfully) where I fixed dnssec-trigger-control-setup to not generate new keys or certificates if called repeatedly. So now the code to delete small keys should get called.
I also included upstream's fix for the segfault we were having. (Also reported as #921227) Unfortunately a bug #921538 showed up in unbound that is causing my CItests to fail