This is not 100% correct. At least with a notify ACL the behavior is: Empty value means that TSIG keys are not allowed. regards Klaus

I guess this means you will update the docs. Thanks Klaus Am 08.01.2018 um 11:03 schrieb Daniel Salzman: > Hi Klaus, > > You are right. This applies to each ACL action. > > Thanks, > Daniel > > On 01/08/2018 09:06 AM, Klaus Darilion wrote: >>> key >>> >>> An ordered list of references to TSIG keys. The query must match one of them. Empty value means that TSIG key is not required. >>> >>> Default: not set >> This is not 100% correct. At least with a notify ACL the behavior is: >> >> Empty value means that TSIG keys are not allowed. >> >> regards >> Klaus