This patch uses a DNS extension to report the running version and check for updates. The messages are encrypted in flight.

The feature is gated at build-time, and enabled in the packages.sury.org repo and in the ondrej PPA.