this could be nice functionality to build in: signing, etc https://dnsinstitute.com/documentation/dnssec-guide/ch04.html