allow-query ACL, subsequent accesses to the same zone were denied because
dbversion->queryok was not being set. This caused mandatory glue to be
omitted from referral responses, ultimately causing lookups to fail if all
authoritative servers for the parent zone were running bind9.