add --with-dnssec for compiling in optional DNSSEC support in dnsmasq