https://labs.ripe.net/author/anandb/dnssec-signer-migration/