Close the connection if authentication fails.

Syslog authentication failures.

Use /dev/[u]random directly to create secret files.  Fail creation
if none of them are available.

Always use "varnishd" as syslog identity, but append "/" + up to seven
leading alphanumeric chars from the -i(dent) argument if available.

to run the varnishd worker process as a different user than the VCC
and CC subprocesses.

It is mandatory that the workuser has the same login group as the user
subparamter.

Recommended values for packaging:

	-junix,user=varnish	"varnish" user has login group "varnish"
	-junix,workuser=vrun	"vrun" user has login group "varnish"

Don't assert that we can remove VCL directories, compilers may have
left crumbs there, for instance gcov profiling info.

Also open argv-supplied secret files with elevated privs.

owned by the initial uid/gid of the varnishd process.

timer parameter.

Fixes #1699

execising that

EPOLLPRI causes the waiter to report activity on a socket when there
is OOB data available. Since HTTP does not make use of OOB the data is
never read and the socket thus is always ready for read according to
the waiter. This causes the waiter to continously assign the session
to a worker only for the worker to find out there is no data sending
it back to the waiter. This continues until the request timeout_idle
has elapsed.

This problem does no constitute a DOS attack vector as the linger
timeout in the session SES_RxReq is still invoked, and this one does
not trigger on PRI. So the worker sleeps on that poll for
timeout_linger before sending the session back to the waiter, and
eventually is dropped on timeout_idle.

Fixes: #1674

This option controls the timeout for the initial VSM open operation

This makes query expression errors be reported before any VSM
connection related errors.

This sets the input cursor to be used by the query.

This is to avoid having to delete the VSLQ context during VSM reopen.

Also allows parsing of the query without having to open the VSM first,
to facilitate early error messages.

After VSLQ_Flush() there should not be any ready vtx' to get rid of.

It isn't internal

proxie'd addresses.