[dns-wg] New on RIPE Labs: A Virtual Canary-in-the-Coalmine for the DNSSEC Root Key Rollover