Allow disabling of DNSSEC

This is so the more expensive datastructures are not created, nor
used.