- Merge #565: unbound.service.in: Disable ProtectKernelTunables again.

* nlnet/master: (23 commits)
  Document PR NLnetLabs#563 to changelog
  Clarify KEEPALIVE EDNS0 option operation
  Make explicit whether edns options are parsed from queries or responses
  add missing return code
  Remove wrongly added EDE comments
  Update util/data/msgparse.c
  add potential EDE spots
  complete renaming of the modules edns list
  Apply suggestions from code review
  Changelog note for NLnetLabs#565 - Merge NLnetLabs#565: unbound.service.in: Disable ProtectKernelTunables again.
  - Fix to remove unused code from rpz resolve client and action   function.
  - Fix analyzer review failure in rpz action override code to not   crash on unlocking the local zone lock.
  - Fix for NLnetLabs#558: clear the UB_EV_TIMEOUT bit before adding an event.
  - Fix for NLnetLabs#558: fix loop in comm_point->tcp_free when a comm_point is reclaimed   more than once during callbacks.
  - Fix that forward-zone name is documented as the full name of the   zone. It is not relative but a fully qualified domain name.
  Disable ProtectKernelTunables again
  - Fix NLnetLabs#552: Unbound assumes index.html exists on RPZ host.
  Fix keepalive logic
  Move option handling to parse-time
  split edns_data.opt_list in opt_list_in and opt_list_out
  ...