New upstream patch release:

• fix: do not reload expired zones on 'knotc reload' and server startup
• fix: rare race-condition in event scheduling causing delayed event execution
• fix: skipping of non-authoritative nodes in NSEC proofs
• fix: TC flag setting in RRL slipped answers
• fix: disable domain name compression for root label
• fix: fix CNAME following when quering for NSEC RR type
• fix: fix refreshing of DNSSEC signatures for zone keys
• fix: fix binding an unavailable IPv6 address (IP_FREEBIND)
• fix: fix infinite loop in knotc zonestatus and memstats
• fix: fix memory leak in configuration on server shutdown
• fix: fix broken dnsproxy module
• fix: fix multi value parsing on big-endian
• fix: adapt to Nettle 3 API break causing base64 decoding failures on big-endian
• feature: add 'keymgr zone key ds' to show key's DS record
• feature: add 'keymgr tsig generate' to generate TSIG keys
• feature: add query module scoping to process either all queries or zone queries only
• feature: add support for file name globbing in config file includes
• feature: add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries
• improvement: send minimal responses (remove NS from Authority section for NOERROR)
• improvement: update persistent timers only on shutdown for better performance
• improvement: allow change of RR TTL over DDNS
• improvement: documentation fixes, updates, and improvements in formatting
• improvement: install yparser and zscanner header files