Disable setup.d/50_openvpn, which seem to be old cruft.
Add new dns-server check to detect if DNSSEC is enabled or not.