dnsmasq: use strict-order when DNSCrypt is enabled.