Validation of DNSSEC information becomes mandatory on 2026-03-15. We already do this, but don't mention it in our CP/CPS.