* we dont want rfc1918 zone or root hints unless we are recursive
* ensure that the named dir exists
* add bind group
* change some defaults and only add dnssec resolver functions if we
* recurse

bla