Libor Peltan authored Aug 16, 2017 and Daniel Salzman committed Sep 08, 2017

new timers system:

created - ( pre_active ) - published - (ready) - active -
(retire_active) - [ retire | post_active ] - remove

ksk rollover:
 - now uses new retire_active for things to settle up after submission
 - CSK/CDNSKEY are always generated for the best active key (except for
imported keys)