In DNSSEC (RFC 2535bis, [3], [4], and [5]), delegations to unsigned subzones are cryptographically secured. Maintaining this cryptography is not practical or necessary. This document describes an experimental 'Opt-In' model that allows administrators to omit this cryptography and manage the cost of adopting DNSSEC with large zones.