remote-servers "stealthPrimaries" {127.0.0.1;};
zone "example.net" {
	type secondary;
	dnssec-policy default;
	inline-signing yes;
	primaries { stealthPrimaries; };
};