Expose the errorstring lookup function
Report something on all errors

+ switch to full recursive,
  because dnssec_return_secure_only didn't work in stub mode at home :(