NSEC3 not getting records generated.

Well mylabbrat.com now seems to be working with a modified line in ispconfig3. The hint was
https://forum.howtoforge.com/threads/dnssec-denial-of-existence-warnings.92517/
I did not use this I added modifications below to the indicated line but it pointed the way. Don't use the one from the link it adds a salt which is now considered bad as is the iterations and does not have the fix I've found.
Debian 10's version is old and needs a kick dnssec-signzone 9.11.5-P4-5.1+deb10u11-Debian
That kick is -H 0 -u
At some later version the default for the iterations is 0.
Change that and restart bind. I go to the DNS section of ispconfig3 and under a zone go to update ACL enter a space and save it. Entering a space may be the wrong way but both of those did trigger the signing and it passes dnsvis now. Thanks
P.S
There is a diff file attached now check it carefully for errors. I had screwed up earlier with my hand slopped version. I fixed that but check the file too. Backup everything but not my brain it's rotten and needs a wipe and reinstall.

Code:

$app->system->exec_safe('cd ?; dnssec-signzone -A -e +1382400 -H 0 -u -3 - -N increment -o ? -K ? -t ?', $dns_config['bind_keyfiles_dir'], $domain, $dns_config['bind_keyfiles_dir'], $dns_config['bind_zonefiles_dir'].'/'.$filespre.$domain);