rollback support in DNS

Right now, the backend DNS code has very little support for rollbacks. If an operation fails (bind reload, for example), the code just keeps on going and leaves files cluttering the config out there. At the very least, stray files should be cleared up on rollback.

We should also check for config file syntax before restarting bind, and rollback on failures.