How to Implement DNSSEC without Losing Your Mind