add a separate config for controlling negative dns caching

this is especially important for a DNS hiccup. if a few packets drop, and a dns lookup failure happens, you can configure this so that it retries *much* faster than the normal positive caching, both reducing load on the DNS server while not exposing yourself to a risk of greater downtime if a DNS hiccup does occure