Name of the TSIG key used to sign updates for this DNS zone. It must match a key defined in the TSIG keys tab and a key accepted by the authoritative DNS server.
Leave empty only for zones that intentionally accept unsigned updates on a trusted network.