This has some (all?) of the DNSSEC key management/distribution mechanism in place. (The SIG and KEY RR's) Obtained from: Paul Vixie / ISC / ftp.isc.org
This has most of the non-essential stuff removed (ie: what is not built) bmake glue to follow.