I'd have loved if instead of reinventing the wheel, they added support for GPG keys in web-based inputs, and distributed GPG keys in DNSNMC. GPG is already widely deployed (among the crypto-sensible people, of course), it would be sad if we had to restart from scratch.
But this is still a step in the right direction.