dnsmasq: fix dnssec+ntp chicken-and-egg workaround (FS#2574)