investigate managing dnssec

[holysoles]

this could be nice functionality to build in: signing, etc

https://dnsinstitute.com/documentation/dnssec-guide/ch04.html