restrict IPv6 dst on node information query to unicast/anycast/link-local multicast.  to conform to spec slightly better.
restrict IPv6 dst on node information query to unicast/anycast/link-local
multicast.  to conform to spec slightly better.

correct scope issue in subject name validation (m->m_pkthdr.rcvif does
not point to real interface, if the packet is multicasted and looped back
using lo0)

MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame,MarginC/kame