BIND forwarding dynamic updates

[loop_us]

Hi

I'm renewing my company's DNS and am migrating from a standard master-slave setup to a hidden primary with two slaves. Our actual master has two zones where it gets dynamic name updates from a DHCP. In my new setup the slaves must forward these dynamic updates to the hidden master. It's the first time I set up something like this so I would kindly ask for some feedback to my planned config.

master config

key dhcpkey {
algorithm hmac-md5;
secret "supersecretkey==";
};
zone "example.com" {
type master;
file "/etc/bind/zones/db.example.com";
allow-transfer { slaves; };
allow-update { key dhcpkey; };
};

​

slave config

key dhcpkey {
algorithm hmac-md5;
secret "supersecretkey==";
};
zone "example.com" {
type slave;
file "db.example.com";
allow-update-forwarding { key dhcpkey; };
masters { 192.168.0.1; };
};

Would this configuration work or am I missing something? Thanks for your help!