[ksk-rollover] followup of DNSSEC Workshop at ICANN64