Creates a new key-signing key (KSK) associated with a hosted zone. You can only have two KSKs per hosted zone.