kresd.j2: turn off DNSSEC with trust_anchors.remove

11 jobs for ta_update_unload
in 1 minute and 44 seconds and was queued for 1 second