This patch switches to the main image, which contains some bug fixes for
DNSSEC handling. Further we switch prefetch back on, as dnssec on
clients is currently disabled due to systemd related problems.

Also the newer build potentially fixed issues with prefetch dropping ad
flags as well.