KSK signing incomplete

[Klaus Darilion]

> Further, I see that sometimes there are no private records at all. When
> does this happen? (I never called "rndc signing -clear") 

It seems that this happens when Bind is restarted.

So, what is the suggested (and reliable) way for external tools to get
the signing status from Bind? I.e. if a key is still used for signing or
can be deleted?

Thanks
Klaus