libevent: regress_dns needs a very specific DNS setup to pass. Disable it.
Disable dns test cases in regress_main
Security: Never expose a private key in the process command-line args
This was here as an alternative to using an environment variable only because
the closed-source opendns user interface was (and probably still is) using
that.
Ditch ldns-forward-after-nxdomain plugin.
Use 8.8.8.8 by default in hostip.
Update hostip man page
Update man page date
Check for arc4random_addrandom() presence - Needed for OpenBSD-current.
Update ChangeLog
Merge remote-tracking branch 'Shnatsel/master'

* Shnatsel/master:
  bump AppArmor profile modification date
  Improve AppArmor profile:  - Use @{multiarch} tunable instead of *-linux-gnu* - they are the same on my system, but using the global tunable is more robust/portable  - Drop block_suspend capability because it requires Linux >= 3.5 and does not seem to be needed (as of my testing)  - Allow access to libpthread and librt, extensive testing indicates it is sometimes needed (libsodium multithreading?)  - Allow access to libsodium if it's installed in the system default path with multiarch support instead of just /usr/lib/ and /usr/local/lib
Add the new DNSCrypt service in Poland
port 2053 for the new Polish server
Handle --disable-plugins* correctly in configure.ac
Merge pull request #37 from Strayer/fix-autotools-configure-arguments

Handle --disable-plugins* correctly in configure.ac
Add masters attribute to Gentoo overlay layout.conf
Update Gentoo ebuilds to use autotools-utils
Bump libsodium Gentoo ebuild to version 0.4.5
Gentoo ebuild: Backport patch to fix always compiling plugins
Merge pull request #38 from Strayer/gentoo-ebuild-fixes

Gentoo ebuild fixes
Add Debian/Ubuntu packaging