onion resolution through tor is now a module
dnscrypt defaults to no-log eu servers and adds key authentication