dnsmasq: backport validation fix in dnssec security fix