Add support for reading trusted dnssec servers from /etc/resolv-sec.conf

This patch uses /etc/resolv-sec.conf, to determine the servers to use when dnssec is requested. This approach avoids issues with programs overwritting the existing resolv.conf (e.g., vpn or dhcp servers).