Limiting the Scope of the KEY Resource Record
draft-ietf-dnsext-restrict-key-for-dnssec-04.txt

KEY RR Restriction

Status of Draft and DNSSEC

Lessons Learned from DNS KEY RR (Or:  Minefield Ahead!)