+6336. [func] Expose the zones with the 'first refresh' flag set in
+ statistics channel's "Incoming Zone Transfers" section
+ to indicate the zones that are not yet fully ready, and
+ their first refresh is pending or is in-progress. Also
+ expose the number of such zones in the output of the
+ 'rndc status' command. [GL #4241]
+
6335. [func] The 'dnssec-validation yes' option now requires an
explicitly configured 'trust-anchors' statement (or
'managed-keys' or 'trusted-keys' statements, both