[dns-wg] Re: DNSSEC - DS RR provisioning