Manual inclusion of concat::setup is deprecated and behaves strangely.
Split at whitespace rather than tabs, since dig is "smart" about formatting. The bug was causing superfluous updates.
Recent puppets demand that puppet class variables be qualified as instance members when accessed from within a template.
This adds a 'dnssec' parameter to the bind::zone define which causes the module to generate keys and sign the zone. Some caveats and breaking changes: 1) Existing non-signed zones will have to be manually moved and signed 2) Signed zones are treated as dynamic