controls { inet 127.0.0.1 allow { trusted; } keys { "rndc-key"; }; };