Add suppression file for valgrind, and turn it on

This is tuned for pdns_server, not the recursor.