check for libkeyutils malware on DNSONLY boxes