Key Management
There is no way to revoke a key, so TTLs will be short and resigning common
All subzones have to be resigned if parent zone is resigned
What happens when COM rolls over?
If a child zone fails to submit new keys if old expires, name servers would not return an answer! should the parent generate a null key?