This adds an online dnssec middleware. The middleware will sign responses on the fly. Negative responses are signed with NSEC black lies.
This allows for CH TXT queries that return some information about the server and/or the authors (or whatever you put in there).