dnssec-revoke(8) on macOS
The text 804b102ccc55, as Mac OS X 10.8.1, Mac OS X 10.8 shipped it.
Set the REVOKED bit on a DNSSEC key
Flags it lists
-
-E -
-K -
-f -
-h -
-r -
-v