[RT #46281]

(cherry picked from commit 583e3559)

                        header files. [RT #46311]

(cherry picked from commit fe79e2ef)

4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]

(cherry picked from commit 30419509)

4773.	[doc]		Fixed generating Doxygen documentation for functions
			annotated using certain macros.  Miscellaneous
			Doxygen-related cleanups. [RT #46276]

(cherry picked from commit 2361003a)

Fix the filter-aaaa system test for builds without DNSSEC support.

(cherry picked from commit 89b2fc09)

(cherry picked from commit a9a98378)

4771.	[bug]		When sending RFC 5011 refresh queries, disregard
			cached DNSKEY rrsets. [RT #46251]

(cherry picked from commit b2597ce8)

4770.	[bug]		Cache additional data from priming queries as glue.
			Previously they were ignored as unsigned
			non-answer data from a secure zone, and never
			actually got added to the cache, causing hints
			to be used frequently for root-server
			addresses, which triggered re-priming. [RT #45241]

(cherry picked from commit 5de02a07)

(cherry picked from commit 74f46c45)

(cherry picked from commit 9492533d)

(cherry picked from commit 5df3f839)

(cherry picked from commit 02a669a9)

(cherry picked from commit e09b9e7a)

4763.	[contrib]	Improve compatibility when building MySQL DLZ
			module by using mysql_config if available.
			[RT #45558]

4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]