Some comments from Mukund on 43376:

* It looks like some of the changes fix issues with the RPZ
  implementation in release branches and should be backported. E.g., the
  change to rpz_rrset_find(), addition of qresult_type_t, etc.

* Should calls to conf_dnsrps_sadd() not check the return value? Why is
  it returning isc_boolean_t then if none of the calls should check the
  return value?

In addition, we need to improve the rpz test so that it reconfigures a
running server to switch from native RPZ to DNSRPS and back again, to
confirm that that works.