clarify glue records
move DNSSEC stuff around
how to update the box