Never mind the idiot (me). It is already implemented in V2.77TEST3.
On 02/26/2017 12:46 AM, Eric Luehrsen wrote:
> The next release trust-anchor.conf file should include DS record (20326)
> as well as (19036). I am sure users would like a seamless transition
> through new KSK introduction and former KSK revocation in 2018.
Dnsmasq-discuss mailing list