[farfatched]

DNSSEC operations feels like one of those problems that should be tackled with formal methods, like how some subway controllers are.

But I expect it's treated like "very serious and scary ops", which isn't wrong, but isn't enough.