Also see draft-ietf-dnsext-keyrr-key-signing-flag-xx.txt