Add no-dns-sec option

This makes it possible to disable dns-sec