Remove dnssec-enabled yes statement
    
    It is not supported since 9.16+ and is always enabled. It is also
    enabled by default on earlier 9.11. There is no reason it has to be
    present, except maybe for very old 9.8 or 9.9 versions.