https://123dok.net/document/yd7ko3j6-consequences-of-compromised-zone-keys-in-dnssec.html