support DS records for DNSSEC

Handle DS records as described at http://dot-bit.org/forum/viewtopic.php?f=5&t=1434

WFM, but you may want to do more testing and/or discuss the record format. OTOH, it does work.

Will have a test server up implementing this soon.