Include DS records explicitly; check them when diffing.
[zones] / certs / distorted-ca.cert
2014-12-23 Mark WoodingAdd some useful-looking TLSA records to hedge against...