SIG/KEY at delegations
APEX KEY set can be large, change frequently, contain non DNS zone KEY records.
Proposals to solve problems
- Reduce communication between parent and child
- Allow "partial" security in secure zones
- Allow zones to express security policies in use