I don't think it's necessary to worry about xfrin, but I do think UPDATE is a good idea. I pushed a suggested change, but I haven't been able to come up with a working test, nsupdate doesn't seem to want to parse a TKEY rdata. I'm probably doing something wrong.