Implement Geoff Huston's trusted key sentinel feature

This is still pending but Geoff Huston has proposed APNIC sponsorship for this feature. Obviously the purpose is to add telemetry for the eventual root KSK rollover.

ref: https://tools.ietf.org/html/draft-huston-kskroll-sentinel-01