A friendly DNSSEC signing solution: sensible defaults, controllability, observability and flexibility.