There is at least a third option, besides naivete or disingenousness (neither are adjectives normally used to describe Dr. Huston), and that is that he is correct. In DNSSEC, zone admins sign their zones. Period. To say that the root is somehow special and needs multiple agents involved in signing delays implementation and may be a show-stopper. We have had too many delays over the course of the last 10 years. Let's just get it done!