lib/cache: no aggressive caching on minimal NSEC* ranges
We use packet cache instead. Also do the same on some kinds of weird RRsets, as even there some caching should be better than none at all. This "incidentally" works around all known cases of DVE-2018-0003.
Edited by Petr Špaček