<%- if tsig_enabled %> key "tsig-transfer-key" { algorithm hmac-sha256; secret "<< tsig_key_secret >>"; }; <%- endif %>