zone "%ZONE%" {
	type master;
	file "%ZONE_FILE%";
	update-policy {
		grant dns-manager-key zonesub any;
	};
	allow-transfer {
		key dns-manager-key;
	};
};