Finish the work started in RT #42272 by removing support for HMAC keys from dnssec-keygen after 9.12 is released.