Update gsskex patch for 6.3, with some refactoring
Add dependency on ldns and enable VerifyHostKeyDNS/SSHFP by default
Convert some to option helpers