[ccnso-council] DNSSEC: Question about signing the root