---- Included message: In other words, it might be risky to add PEM information to DNS, but it would probably not be risky to ad IP security information to DNS. I believe that the 'keys' in question are generic public keys, rather than being tied to IP security levels. d/