This doesn't really matter in the current code as it is the
default and only 'one' makes the implementation change its
scope, but for the sake of consistency let this be fixed.

We're switching to PHP 7.0 (or 7.1 maybe), php-suhosin seems dead,
and maybe someone wants to work on a newer python base.

PR: https://forum.opnsense.org/index.php?topic=3976

Private functions get "_" prefix, easy to spot from elsewhere
if needed.  Yes, someone will try this eventually.  ;)

PR: https://github.com/opnsense/core/issues/1250

Discussed with: @adschellevis

o Respect the 'dnslocalhost' option, which wasn't previously possible
  because dhcpleases clobbered /etc/hosts directly anyway.
o Align the code with how unbound does it: use a private file for
  the hosts generation.
o HUP dnsmasq at the end of the hosts file regeneration.
o `--dhcp-hostsfile' was really really wrong as /etc/hosts is read
  automatically, and the file specified here should have been adhering
  to the dhcp leases format of on `--dhcp-host' argument per line.

(proxy) add ftp support again for remote acl download. We switched to python's requests library, which doesn't support ftp. Some people still use ftp though.

Getting crowded...

(ipsec) fix syslog output, eventually we should switch to the new style loggers, but for now it's better to make sure charondebug is respected.

From the docs:

Starting with version 4.2.9, strongSwan provides a much more flexible configuration of the loggers. Logger configurations in strongswan.conf have a higher priority than charondebug in ipsec.conf: If you define any loggers in strongswan.conf, charondebug does not have any effect at all.

Turns out unbound reload flushes cache as well.  Also, unbound-control
may hang when it runs into an "undefined state" (stoping a stopped
service, right), and lastly it wants to chroot after being chrooted
on reload, something that cannot be fixed with using unbound-control.

Keep unbound-control-setup in case somebody finds the facility useful.

Firmware MVC pages were introduced in 2015, since having been worked
on by Deciso and myself.