Implement a check-ds option to configure one or more name servers to query to ensure the DS for a given key is published. This is needed to perform automatic key rollover (for keys with the KSK role).

Will need a check-ds-interval too, to configure how often such a check needs to be performed.