This reverts commit
86e9d04bfb73eb256682a567e187fe1e5cdcc3ca.
This seems to be working with unbound 1.6.0 so that this can be
re-enabled for better privacy.
http://lists.ipfire.org/pipermail/development/2016-December/002807.html
# Privacy Options
hide-identity: yes
hide-version: yes
+ qname-minimisation: yes
minimal-responses: yes
# DNSSEC
harden-short-bufsize: no
harden-large-queries: yes
harden-dnssec-stripped: yes
+ harden-below-nxdomain: yes
harden-referral-path: yes
harden-algo-downgrade: no
use-caps-for-id: no