Yup, it really boils down to that. I have the basic prototype working, but plan to get the npub to sign the rr_sig record as well. I am working with a DNS OG to make that happen.