Import openresolv-3.7.1 with the following changes:

*  Typo's, thanks to Herbert Parentes Fortes Neto
  *  Clarify that private_interfaces="*" will not forward the root zone
  *  ensure that domain-insecure always appears in a server clause for
     the unbound subscriber

external/bsd/openresolv/dist/unbound.in

@@ -45,7 +45,8 @@ for d in $DOMAINS; do
 	ns="${d#*:}"
 	case "$unbound_insecure" in
 	[Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1)
-		newconf="$newconf${NL}domain-insecure: \"$dn\""
+		newconf="$newconf${NL}server:$NL"
+		newconf="$newconf	domain-insecure: \"$dn\"$NL"
 		;;
 	esac
 	newconf="$newconf${NL}forward-zone:$NL	name: \"$dn\"$NL"