As we all know, Plesk keeps it's own bind configs and woe be to those who mess with that dragon. Is there now a way, since last asked back in 2006 to enter TSIG config into the plesk named.conf without it being overwritten on reload? It's now become more important than ever to lock down DNS transfers and this is probably the best way to do it. I use an external service to slave off of dnspark.net and they gave up on simple IP based acl's and now only use TSIG. Makes a lot of sense to me but I can't get Plesk to play ball. If this won't work with 8.3/8.4, consider this a plea for a new feature that should take a day or two to do for 8.5. Thanks!