Remove-DnsServerSigningKey: remove dns server signing key against recorded identity and DNS state
Microsoft states: “The Remove-DnsServerSigningKey cmdlet removes one or more signing keys from the specified Domain Name System (DNS) zone.”
Read the explainer