Map DNS_R_BADTSIG to FORMERR
The more specific error code for TSIG out of place on a query was not being mapped to FORMERR.
https://support.isc.org/Ticket/Display.html?id=16828
Now that the log message has been printed set the result code to DNS_R_FORMERR. We don't do this via dns_result_torcode() as we don't want upstream errors to produce FORMERR if that processing end with DNS_R_BADTSIG.
Edited by Mark Andrews