reword some sentences about KSK, ZSK, and enabling DNSSEC
reword some sentences about KSK, ZSK, and enabling DNSSEC

Suggestions from Tony Finch.

Also fixed some typos and remove a default configuration example.

isc-projects/isc-dnssec-guide