Extend custom roles to DNS Zones

I'd love to see the custom roles extended to dns zones - maybe even only allowing certain types of records.  We need the ability to restrict which zones and types of records that users are allowed to edit or create.