modules: add module to refuse queries without RD bit set
Refusing to answer queries without RD bit makes it harder to read what data is present in resolver's cache. This should improve privacy of the resolver's users, especially for public open resolvers.