modules/policy: DENY home.arpa. special-use domain

Well, it's just an approximation... if the user specifies a forwarding
policy, any special names will also get forwarded, even though the RFC
says not to.  And this code will also reply NXDOMAIN to home.arpa. DS.

For local. we kept the default behavior, after some research,
as there seems almost no benefit and there's risk of having
a validating resolver downstream that doesn't treat local.  Refs.:
- home.arpa.: 4. from https://tools.ietf.org/html/rfc8375#section-4
- local.: 4. from https://tools.ietf.org/html/rfc6762#section-22.1
28 jobs for <span class="ref-name">policy-special-use-dnames</span> in 46 minutes and 30 seconds (queued for 2 seconds)
Status Job ID Name Coverage
  Build
passed #289143
docker linux amd64
archive

00:00:41

passed #289144
docker linux amd64
build

00:00:48

passed #289145
docker linux amd64
build-asan

00:00:49

passed #289146
docker
kres-gen

00:00:45

 
  Test
passed #289147
docker delayed
build:darwin

00:01:09

passed #289170
docker linux amd64
deckard

00:01:31

passed #289149
docker delayed
doc

00:00:55

passed #289150
dind
docker

00:04:07

passed #289151
docker delayed
lint:other

00:00:54

passed #289152
docker linux amd64 delayed
lint:pedantic

00:01:10

passed #289153
docker linux amd64
lint:scan-build

00:02:16

passed #289154
docker linux amd64
lint:tidy

00:03:01

passed #289155
privileged
pkg:epel-7

00:03:26

passed #289156
privileged
pkg:fedora-29

00:04:05

passed #289157
docker linux amd64
respdiff:basic

00:02:49

passed #289158
docker linux amd64 delayed
test:valgrind

00:01:56

failed #289148
docker linux amd64
deckard

00:02:10

 
  Extended
failed #289160
respdiff
fwd-tls6-kresd.udp6

00:16:21

passed #289161
respdiff
fwd-udp6-kresd.udp6

00:22:54

failed #289165
respdiff
fwd-udp6-unbound.tcp6

00:29:54

passed #289166
respdiff
fwd-udp6-unbound.tls6

00:41:25

failed #289164
respdiff
fwd-udp6-unbound.udp6

00:25:54

failed #289163
respdiff
iter.tls6

00:19:23

failed #289162
respdiff
iter.udp6

00:26:54

passed #289159
docker linux amd64
pytests

00:04:11

failed #289167
respdiff
resperf:fwd-tls6.udp-asan

00:28:50

failed #289168
respdiff
resperf:fwd-udp6.udp-asan

00:28:20

passed #289169
respdiff
resperf:iter.udp-asan

00:26:19

 
Name Stage Failure
failed
fwd-udp6-unbound.tcp6 Extended
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
$ cat respdiff_commitdir/$RESPDIFF_TEST/*histogram.tar.gz | tar -xf - -i ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=90340 revision=de7731dd version=12.1.0
./j*: found 18 matching files
./*.png: found 2 matching files
./*histogram/*: found 6 matching files
Uploading artifacts to coordinator... ok id=289165 responseStatus=201 Created token=7JkKz7iR
ERROR: Job failed: exit status 1
failed
resperf:fwd-tls6.udp-asan Extended
Attaching to dir_16716_kresd_fwd_target_1, dir_16716_kresd_1
$ exit $EXITCODE
Running after script...
$ cp -t . resperf_commitdir/$RESPERF_TEST/j* ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=90142 revision=de7731dd version=12.1.0
./j*: found 7 matching files
Uploading artifacts to coordinator... ok id=289167 responseStatus=201 Created token=yEUJorkf
ERROR: Job failed: exit status 1
failed
resperf:fwd-udp6.udp-asan Extended
kresd_fwd_target_1  | SUMMARY: AddressSanitizer: 32800 byte(s) leaked in 2 allocation(s).
$ exit $EXITCODE
Running after script...
$ cp -t . resperf_commitdir/$RESPERF_TEST/j* ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=90037 revision=de7731dd version=12.1.0
./j*: found 7 matching files
Uploading artifacts to coordinator... ok id=289168 responseStatus=201 Created token=Exy8zBPE
ERROR: Job failed: exit status 1
failed
iter.udp6 Extended
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
$ cat respdiff_commitdir/$RESPDIFF_TEST/*histogram.tar.gz | tar -xf - -i ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=89804 revision=de7731dd version=12.1.0
./j*: found 19 matching files
./*.png: found 2 matching files
./*histogram/*: found 7 matching files
Uploading artifacts to coordinator... ok id=289162 responseStatus=201 Created token=1rYszT1-
ERROR: Job failed: exit status 1
failed
fwd-udp6-unbound.udp6 Extended
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
$ cat respdiff_commitdir/$RESPDIFF_TEST/*histogram.tar.gz | tar -xf - -i ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=89527 revision=de7731dd version=12.1.0
./j*: found 18 matching files
./*.png: found 2 matching files
./*histogram/*: found 6 matching files
Uploading artifacts to coordinator... ok id=289164 responseStatus=201 Created token=xF1Zvu_-
ERROR: Job failed: exit status 1
failed
iter.tls6 Extended
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
$ cat respdiff_commitdir/$RESPDIFF_TEST/*histogram.tar.gz | tar -xf - -i ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=88488 revision=de7731dd version=12.1.0
./j*: found 19 matching files
./*.png: found 2 matching files
./*histogram/*: found 7 matching files
Uploading artifacts to coordinator... ok id=289163 responseStatus=201 Created token=6FUCJdxE
ERROR: Job failed: exit status 1
failed
fwd-tls6-kresd.udp6 Extended
$ cp -t . respdiff_commitdir/*$RESPDIFF_TEST*.png ||:
$ cat respdiff_commitdir/$RESPDIFF_TEST/*histogram.tar.gz | tar -xf - -i ||:
Uploading artifacts...
Runtime platform arch=amd64 os=linux pid=87958 revision=de7731dd version=12.1.0
./j*: found 18 matching files
./*.png: found 2 matching files
./*histogram/*: found 6 matching files
Uploading artifacts to coordinator... ok id=289160 responseStatus=201 Created token=mKs9KRq1
ERROR: Job failed: exit status 1