@digitalocean too bad! I'm running a droplet currently that manages its own dnssec, but that doesn't seem super fault tolerant