The dnssec-makekeyset and dnssec-signkey tools are not targets in the bin/dnssec/Makefile.in, so they are not built, even though their code and documentation is still in the distribution. Was this intentional, ie. are they deprecated now? If so, this is not documented in the CHANGES file.