Hello, If the unbound daemon itself is started with a valid root.key, does it keep the key up-to-date via RFC5011 itself, or is that only updated via periodic runs of unbound-anchor? Thanks, -Dan