**<https://git.majava.org/software/edif/>**
Needed:
* [ ] DNSSEC signature validity
* [ ] DNSSEC in parent zone matches local data
* [ * [x] Parent zone delegations are as expected
* [ ] Serials match on all nameservers (including external secondaries)