Merge branch 'policy-special-use-dnames' into 'master'

modules/policy: DENY forgotten special-use domains

See merge request !855
27 jobs for nightly
in 8 minutes and 46 seconds and was queued for 2 seconds