nYou will need to generate multiple
keys and designate their use
as zone or key signing keys.
nThe zone signing key does not need
to be as long the key signing
key.
nThe zone signing key can be
rolled-over without interaction with
parent or children.
nThe key signing key will be
configured in resolving name servers
(and maybe later uploaded to your parent)
nThere is no way (yet) to
distinguish between the two.