If you were thinking about implementing DNSSEC, Michael Lucas did it himself and wrote down his notes.  You can read them and either follow along to implement it yourself, or just spectate.  The one disadvantage is that it uses BIND 9.9, and I only see 9.8 and 10 in pkgsrc.