A thing that is needed when combining RPi with Unbound, is a way to resynchronize the system time after power cuts. The standard NTP setup is driven by DNS hosts, and Unbound, at least with DNSSEC validation is time sensitive. The ballet of NORESOLVE is a nightmare.
This happens easily due to the lack of a realtime clock on the Pi. A local GPS with PPS, a dirty ip-based set of NTP hosts or a shell script can solve it, but this should be part of an extensive guide, in my pained opinion :)