Support allow-query per zone

[pixelrebel]

Template now supports allow-query in the zone stanza, allowing for more granular access control per zone. I found this important for my infrastructure which relies on a zone dedicated to prometheus service discovery. The ansible config would look like this:

        - name: srv.mydomain.net
          type: secondary
          allow_query:
            - 192.168.0.0/24
            - 192.168.255.0/27
          primaries:
            - 192.168.0.11