Hi Volker,thank you for your question.
Your suggestion is almost correct, just a little correction:
knotc zone-freeze $ZONE
# wait for possibly still running events (check the logs manually or so...)
knotc zone-flush $ZONE # eventually with '-f' if zone synchronization is disabled in config
$EDITOR $ZONEFILE # you SHALL increase the SOA serial if any changes made in zonefile
knotc zone-reload $ZONE
knotc zone-thaw $ZONEReload before thaw - because after thaw, some events may start processing, making the modified zonefile reload problematic.