Otherwise as you say the zone must be removed and re-added.
If the new policy uses a different algorithm, it seems there is no proper rollover (I changed from 15 to 13 and the new policy fully applies, nothing is left of keys and signatures of the previous algorithm).
Originally posted by @bortzmeyer in #903
Originally posted by @bortzmeyer in #903