Whats the number of times the letter r appears in:
Q: Does PowerDNS update DNSSEC records even if SOA serial does not change? Im trying to understand if PowerDNS slaves can update records even if the serial number in the SOA for the zone does not change. The scenario I have in mind is the following:
There is one master server which does live signing for DNSSEC. Background is that I want to be able to deliver current signed records by only changing the database. When the SOA serial in the database changes, the slaves get notified and retrieve the new (and signed) data automatically.
However, according to the documentation the RRSIG records have a validity of between one or two weeks. Would the slaves pick up new RRSIG records automatically even if the SOA is not changed?

A: Yes, if you replicate the records via the database and all other servers are also PowerDNS (see note about DNSSEC and non-powerdns replicas, such as bind slaves)

Warning: If you have DNSSEC-signed zones and non-PowerDNS slaves,
  please check your SOA-EDIT settings

.
https://doc.powerdns.com/md/authoritative/modes-of-operation/
note, this is also how bind with ldap backends work (my experiance with FreeIPA and DNSSEC)

user
There are fifty-seven "r"s.
assistant