Karel Koci authored Mar 30, 2021 and Karel Koci committed Mar 30, 2021

This explicitly enables DNSSEC validation and adds additional option to
conform to RFC1035.
It also uses named.ca file shipped as part of package as root hints.
We can safely left out `listen-on` as `listen-on-v6` uses dual-stack and
thus listens on IPv4 as well as on IPv6.

And the last but the most important change is disable of IPv6. This
solves issues on IPv4 only network but IPv6 once we begin to support
IPv6 we should allow disable/removal of this line.