I want to support DynDNS on bind9 nameserver with TSIG controll. When I read ARM for bind9 it seems like a TSIG key is bound one remote server: