dynamic update security

[Andy Choi]

Hi all,

I am considering to use dynamic update to manage my DNS server. After
reading the BIND doc(ARM) which comes with the source distribution, i am
wondering if the use of

    allow-update { key "key" }

is sufficient for localhost updates only.

Also, is there any example in the use of update-policy?

thanks,
Andy