DNSSEC operations feels like one of those problems that should be tackled with formal methods, like how some subway controllers are. But I expect it's treated

DNSSEC operations feels like one of those problems that should be tackled with formal methods, like how some subway controllers are. But I expect it's treated like "very serious and scary ops", which isn't wrong, but isn't enough.