modules: add module to refuse queries without RD bit set

Refusing to answer queries without RD bit makes it harder
to read what data is present in resolver's cache. This should improve
privacy of the resolver's users, especially for public open resolvers.
29 jobs for refuse-nord
in 7 minutes and 44 seconds and was queued for 2 seconds