DNSSEC helper scripts