add script to generate TLSA records