tidy wording from when dnssec was enabled/disabled/reenabled

ok kn gsoares

src/etc/unbound.conf

@@ -1,4 +1,4 @@
-# $OpenBSD: unbound.conf,v 1.19 2019/11/07 15:46:37 sthen Exp $
+# $OpenBSD: unbound.conf,v 1.20 2020/06/21 16:59:45 sthen Exp $
 
 server:
 	interface: 127.0.0.1
@@ -19,12 +19,12 @@ server:
 	hide-identity: yes
 	hide-version: yes
 
-	# Perform DNSSEC validation. Comment out the below option to disable.
+	# Perform DNSSEC validation.
 	#
 	auto-trust-anchor-file: "/var/unbound/db/root.key"
 	val-log-level: 2
 
-	# Uncomment to synthesize NXDOMAINs from DNSSEC NSEC chains
+	# Synthesize NXDOMAINs from DNSSEC NSEC chains.
 	# https://tools.ietf.org/html/rfc8198
 	#
 	aggressive-nsec: yes