dnsmasq: improve insecure DS warning