This change isn't necessary, "dnssec-keygen -A none " will already do this. I suppose it's harmless, though.