BIND rndc

Hi all, has anybody got a working rndc config. I can't seem to find the correct way to produce the SECRET ? Book says use "mmencode" but it's not part of 8.1, it seems. dnssec-keygen creates asymmetric key. Which one do I use ? Any advice appreciated. Tia Dan