i've never filled a ticket out. he didn't seemed like he wanted it in there. i'm also not certain how things work. i'm assuming unbound-control-setup would also have to be left on the router. it would probably be set up to create the keys and pems in the /etc/unbound directory but that is read only. it would probably have to be set up to create them in /jffs/etc or /jffs/etc/unbound