Status of DNSSEC, based on user-desired state and presence of necessary records. Available values: "active", "disabled".