> Can you share a bit about why you want to get out of using > opendnssec/openhsm? i need bind bitw for other zones. so two methods, one with a lot of moving parts, ... > I would regard this as an opportunity to test key rollover with your > parent zone :-) i have plenty of bullets and only two feet randy