Are there any #Linux #cPanel and/or #PowerDNS #sysadmins which use #pdns with #DNSSec zones and external secondary/backup #nameservers ?

I'm having issues when the key rollover happens (it doesn't update the serial in the SOA nor does it seem to propagate to the secondaries). Using BIND as the PowerDNS backend which I suspect is the root cause, but #CloudDNS doesn't seem to like/pay attention to the "faked" serials pDNS is meant to send.