add DNSSEC conf for Dnsmasq,but not enabled by default