[patch] more TSIG-GSS fixes

[tridge at samba.org]

I've got a few more patches for TSIG-GSS support in bind9.

Instead of continuing to patch-bomb the list, I've put all the patches
here:

  http://samba.org/tridge/bind9-patches/

The changes are:

  - leave the question in a update refusal response
  - fix a minor valgrind warning with epoll
  - don't compress TSIG names 
  - give more sensible errors on bad TSIG-GSS config 
  - don't use GSS_C_SEQUENCE_FLAG, as that breaks TSIG validation with
    Windows DNS servers

The last patch is the one that was causing nsupdate to incorrectly
report a validation failure when talking to a w2k8r2 DNS server.

Cheers, Tridge

PS: If you'd prefer the patches sent separately to the list let me
know. I couldn't find a patch submission policy on the bind9 site.