Include DS records explicitly; check them when diffing.
[zones] / certs /
2014-12-23 Mark WoodingAdd some useful-looking TLSA records to hedge against...