Check signature validity before adding
Add inflight stuff

Still need to fix signature generation to actually use this, but then
we only create 1 signature in the event of thundering hurds of DNSSEC
queries.