Cloudflare recently added support for DS records. They are used to delegate DNSSEC trust to a subdomain.