*.lisp: Add CAA records to discourage wrong CAs from issuing.
[zones] / certs /
drwxr-xr-x   ..
-rw-r--r-- 6340 distorted-ca.cert