dnsmasq: backport dnssec security fix