kdig: introduce "doflag" and make "dnssec" an alias for it

kdig allows setting the various flags with options like "XXflag", but missing from this list is "doflag". For consistency, kdig should have "doflag", and the current "dnssec" flag should become an alias for it, similar to how the "recurse" flag is handled.