shared KSK for static zone and dynamic subzone?

[Jan-Piet Mens]

> While writing this, a compromise came to me. :) I can run forward 
> zones as children of a single TLD, and use 168.192.in-addr.arpa. as 
> parent for all my reverse zones. :)

If you're setting up your own DNS root server, you could sign that root
zone, have your clients enter that island of trust and follow the
chain of trust, just like in the "real world". :)

        -JP