To enable DNSSEC, the nameservers need to be pointed externally, as our current DNS setup doesn’t support this environment. However, the DS record can still be added on the domain registrar. You might consider pointing the nameservers to Cloudflare and providing us with any required DS records so we can add them on our end.