**<https://git.majava.org/software/edif/>**
Needed:
* [ * [x] DNSSEC signature validity
* [ ] DNSSEC in parent zone matches local data
* [x] Parent zone delegations are as expected
* [ * [x] Serials match on all nameservers (including external secondaries)