[dns-operations] How can BIND find itself that I used NSEC3 with opt-out?

[Stephane Bortzmeyer]

On Wed, Nov 18, 2009 at 02:39:00PM +0100,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 24 lines which said:

> > > 2) How can BIND find by itself that I use opt-out?
> > 
> > If there is a signer in bind then there needs to be a setting in the
> > bind zone clause (I guess) that tells it what to do when signing
> > dynamic updates.
> 
> I cannot find such an option in the ARM, even with grep's help. Anyone
> knows its name?

OK, ignore it, Mark Andrews' answer is what I needed.