reset taskmgr immediately after loading zones

all privileged tasks are complete by the time we return from isc_task_endexclusive(), so it makes sense to reset the taskmgr mode to non-privileged right then. this avoids a potential issue where a zone reload request comes in via rndc before we've switched out of privileged mode.

See #2638 (closed)