CAA records are requested and used only by certificate authorities. They might as well not exist for web browsers (they don't even look for them). Maybe that should change?
I believe DANE addresses this (and other things, which is what makes it complicated).