Btw, kudos to the sans.org admins for getting their DNSSec on and registering *.sans.org with dlv.isc.org