deckard: Put trust anchors for each domain into separate files

RFC 5011 implementation in kresd and Unbound require separate
trust anchor file for each domain.
11 jobs for per-domain-anchors
in 1 minute and 30 seconds and was queued for 2 seconds