Move trust anchor file to a directory owned by unbound so it can be
updated.  Also initiate the file using unbound-anchor instead of using a
hard coded DS record.