zone "%ZONE%" {
	type master;
	file "%ZONE_FILE%";
	update-policy {
		grant rndc-key zonesub any;
	};
	allow-transfer {
		key rndc-key;
	};
};