expand any-to-tcp to direct RRSIG queries
fix OPT inclusion in truncated responses to EDNS queries
add nsec3 result for direct-rrsig test
also add narrow result for direct-rrsig test
improve OPT handling, presumably fixes #875
unbreak.. well, everything. Brown paper bag commit.
add selinux policy files