Update returns FORMERR: ran out of space

[Stephane Bortzmeyer]

On Tue, Feb 23, 2010 at 02:56:15PM +0100,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 17 lines which said:

> Trying to add/delete DNSSEC keys with dynamic update (first time I try
> that), the nsupdate client gets a FORMERR and BIND logs:

Some details:

* I use NSEC3 with opt-out
* I checked with a completely new zone, with an empty history (same
  problem)
* I checked the ARM which says that dynupdating DNSKEY is supported