DelegatedSignerSubmitCommand callout: unable to issue ds-seen

From inside the DelegatedSignerSubmitCommand wrapper script, I am unable to issue a ds-seen.  The exact same wrapper can be called either from a cron job using ods-enforcer key export or off the command line and works just fine.

The command being issued is "ods-enforcer key ds-seen --zone {domain} --keytag {keytag}

(with appropriate values for domain and keytag filled in).

The error I am getting is as follows:

0 KSK matches found. 0 KSKs changed

Is it possible that the key has not yet made it to "ready" state yet?