Enable dnssec validation in unbound

In order to validate DNSSEC, we need to have support enabled in the caching resolvers that we use.

(from redmine: created on 2016-06-23, closed on 2016-07-12)