warning, you cannot type this into a zone file. but since many of you have been following the DNSCERT events, i'm choosing to share this here. http://www.circleid.com/posts/20100617_towards_a_dnscert_definition/