separate host_vars/.gitignore file
DNSSEC validation and Single Packet Authentication (SPA) support