> "and use ods-ksmutil key ds-seen when the DS appears in the DNS" <doh> > The enforcer will not actively query the parent and look for any > changes i had assumed it would. silly me. thanks randy