The fix for me was to delete the managed-keys files in /var/cache/bind
I had already put bind.keys in this folder and added to my main named.conf
Also I put
dnssec-lookaside auto;
in the named.conf.options
My first times with bind so don't really know 100% what any of this does yet! lol...