If you are looking to give dnssec feature to your customer and you are getting the following error "
This error means "In this case, the registry might have defined a particular object, but does not permit all EPP actions to be performed upon it (like <contact:renew>). Or perhaps, the registry has not defined the object at all.".
That means your Registrar did not activated yet dnssec feature in your account. You must have to contact switch epp support regarding that.
