roles/named: Support logging queries to syslog

This commit adds two new variables to the *named* role:
`named_queries_syslog` and `named_rpz_syslog`.  These variables control
whether BIND will send query and RPZ log messages to the local syslog
daemon, respectively.

roles/named/templates/named.conf.j2

@@ -77,6 +77,24 @@ logging {
                 file "data/named.run";
                 severity dynamic;
         };
+{% if named_queries_syslog %}
+	channel queries_syslog {
+		syslog daemon;
+		severity info;
+	};
+{% endif %}
+{% if named_rpz_syslog %}
+	channel rpz_syslog {
+		syslog daemon;
+		severity info;
+	};
+{% endif %}
+{% if named_queries_syslog %}
+	category queries { queries_syslog; };
+{% endif %}
+{% if named_rpz_syslog %}
+	category rpz { rpz_syslog; };
+{% endif %}
 };
 
 zone "." IN {