lib/cache: no aggressive caching on minimal NSEC* ranges
We use packet cache instead. Also do the same on some kinds of weird RRsets, as even there some caching should be better than none at all. This "incidentally" works around all known cases of DVE-2018-0003.
Showing with 103 additions and 37 deletions