got first round of dns stuff for the broker, still need to sort out dnssec