I've been looking for DNS hosts that support DNSSEC, have an API, and support the KEY RR. At the start of this month Gandi covered the first two but not the last. So I dropped them an email. Two weeks later and their LiveDNS platform supports the KEY RR. Well done Gandi.