Indeed, this already exists with record types such as TLSA, SMIMEA, and CERT.

However I don't believe I've ever seen it used "in the wild".