GitLab

Speed: on my office desktop it didn't increase the amount of resources
needed to run all the tests; I actually got a little shorter time,
but that was most likely due to random variations.

NSEC proofs refactoring

Close #191, #471

See merge request !570

NSECs don't exist at non-terminals, NSEC3s don't exist in opt-out.

The real previous name has to be stored because the wildcard
needn't be expanded from QNAME but can be expanded as a part
of CNAME/DNAME chain.

Don't require the node to be authoritative. This is need for DNSSEC
proofs and this should be handled there.

DNS over TLS in kdig



See merge request !569