What are the steps which must be followed to enable serverwide zone transfers between two BIND 9 servers securely using TSIG?

A.
Generate a key, specify the public key in the named configuration on both servers, create a server statement in the name configuration on both servers

B.
Generate a key, specify the private key in the named configuration on both servers, create a server statement in the named configuration on both servers

C.
Generate a key, specify the private key in the named configuration on one server and the public key in the named configuration on the other, create a remote statement in the named configuration on both servers

D.
Generate a key, specify the private key in the named configuration on one server and the public key in the named configuration on the other, create a server statement in the named configuration in both servers