. . . dnssec-validation no; allow-recursion { any; }; allow-query-cache { any; };