- [ ] Store permissions as JSON - [ ] Store RR rdata as JSON (or tinydns or binary/wire format) - [ ] verify the API won't permit setting auto-increment fields