Now all I need is a patched version of the 9.3 snapshot tree, so I don't need to kill my dnssec stuff :P (And it's time for a non-snapshot bind version with full dnssec capabilities anyway :)

if you ask that question on bind-users@isc.org, i promise to answer. but i do not think details of that nature are interesting on nanog@.