Include error output from commands run by dnsmatch endpoint

The output occasionally comes back as an empty string, triggering a
bogus mismatch. But there is no indication of why. It's not yet clear
whether overlooking this falst mismatches is a good idea, or whether
there is a genuine error occurring.