The ddset-* files are generated by dnssec-signzone. These contain DS records
to be included via unbound for DNSSEC validation.

