In OpenDNSSEC 2.0.4 I'm able to add a zone in a suspended state using:
> ods-enforcer zone add -
zone example.com --suspended---
This causes no keys to be assigned to the zone and no next transition time to be rendered:
> ods-enforcer zone list
Zones:
Zone: Policy: Next change: Signer Configuration:
example.com default no changes scheduled ..
But more importantly (!!) no keys to be assigned to the zone:
ods-enforcer key list
Keys:
Zone: Keytype: State: Date of next transition:
key list completed in 0 seconds.
I.e. no keys.
However in 2.1.0 there are immediately keys assigned and a next transition planned.
This blocks importing zones with existing keys.