dnsmasq: fix handling ignore condition for dnssec