return original wire response rather than a SERVFAIL answer in stub resolver mode when we get NXDOMAIN (or empty answer).
add dns_p_free, dns_p_setptr, and dns_p_movptr utility routines rather than sprinkling free(pkt), pkt = foo everywhere.