When you make changes to the enforcer section of conf.xml, kasp.xml or zonelist.xml you must run the
command (or the appropriate command listed below) in order for the changes to be propagated to the system database.
ods-ksmutil update conf
For most other changes to the conf.xml file it is advisable to stop and start OpenDNSSEC to ensure the changes are detected.
When you make changes to a policy or add a new policy in kasp.xml you must update the changes to the database.