Statistics for Enabling Post-Quantum Signatures in DNSSEC: One ARRF at a time