BTW, some web2 domain registrars like Godaddy CHARGE a fee to enable DNSSEC per domain! So even if DNS import is gasless, enabling the tech in your DNS settings could have a cost at the registrar. Use a domain registrar that does not charge for this.