A workaround for ticket N 5348
    
    A freshly created dnssec-enabled zone does not always display the signature
    until you restart named-pkcs11. Added restarting of this service after each
    dnssec-enabled zone.
    
    https://fedorahosted.org/freeipa/ticket/5348
    
    Reviewed-By: Martin Basti <mbasti@redhat.com>