Title: #3725: Ensure recursion is locked when deploying DNS service
This patch kind of revert what was done in . 8 years ago,
amplification attack was maybe not "a thing", but nowadays, we can't
possibly get wide opened FreeIPA services.
A next step would be to add a new option to the install CLI, allowing to
list the additional networks we want to open.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3725/head:pr3725
git checkout pr3725