dnssec-revoke(8) on macOS
The text 27e6a526c33c, as macOS 10.13.3, macOS 10.13.2, macOS 10.13.1, macOS 10.13 shipped it.
Set the REVOKED bit on a DNSSEC key
Flags it lists
-
-E -
-K -
-R -
-V -
-f -
-h -
-r -
-v