The rc.d service script for OpenDNSSEC 2.x in the dns/opendnssec2 2.1.4_1 package  includes 'ksm' and 'reload' in the 'extra_commands' value. I believe these should be removed, because:
1. OpenDNSSEC 1.x had a 'ksm' component that was renamed to 'enforcer' in OpenDNSSEC 2.x. The 'dns/opendnssec2' package continues to reference  'ksm' which is not a supported subcommand of ods-control  in OpenDNSSEC 2.x.
2. While the 'signer' and 'enforcer' subcommands support their own 'reload' subcommand, the 'ods-control' tool does NOT support a higher level 'reload' subcommand, e.g. 'ods-control signer reload' is possible but 'ods-control reload' will result in a usage error.
Created attachment 208507 [details]
Proposed alternate script content
See attached proposed alternate script contents, either to be used, to assist with correcting the current script or to illuminate what perhaps needs to be done.
I'm not familiar with FreeBSD rc.d scripts so apologies if it is not suitable. I took a quick look at https://www.freebsd.org/doc/en_US.ISO8859-1/articles/rc-scripting/index.html but noted that OpenDNSSEC is not out-of-the-box compatible with the default expectations, e.g. pid files, status checking, thus I wrote custom functions to do the work.
Briefly tested on FreeBSD 12.0-RELEASE r341666 GENERIC in a VirtualBox VM.