dnsmasq: correct sense & usage of dnsseccheckunsigned