Use a public key for the main webserver's TLSA record.
[zones] / keys / artist.sshfp
2014-04-15 Mark WoodingMove lots of key files into a subdirectory.