systemd unit files for dnssec-keymgr (bind 9.16). No longer relevant with 9.18, but might still be useful. Archiving it here.
[Unit]
Description=dnssey-keymgr for %i
[Service]
Environment=DNSSEC_POLICY_FILE=/etc/dnssec-policy.conf
EnvironmentFile=-/etc/conf.d/dnssec-keymgr
ExecStart=/usr/bin/dnssec-keymgr -c $DNSSEC_POLICY_FILE %i
User=named
Group=named
[Install]
WantedBy=multi-user.target
[Unit]
Description=Daily invocation of dnssec-keymgr for %i
[Timer]
OnCalendar=daily
Persistent=true
[Install]
WantedBy=multi-user.target