How to hide version information of bind DNS server?

Issue

• STIG finding: The DNS Name Server software must be configured to refuse queries for its version information. (V-205194)

• I would like to hide version information of bind for the query from the client like below.

  # dig @127.0.0.1 version.bind chaos txt
  
  ; <<>> DiG 9.16.23-RH <<>> @127.0.0.1 version.bind chaos txt
  ; (1 server found)
  ;; global options: +cmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59832
  ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
  
  ;; OPT PSEUDOSECTION:
  ; EDNS: version: 0, flags:; udp: 1232
  ; COOKIE: 6c12ddef23c6872301000000666a34d5bdcadcc99495e497 (good)
  ;; QUESTION SECTION:
  ;version.bind.          CH  TXT
  
  ;; ANSWER SECTION:
  version.bind.       0   CH  TXT "9.16.23-RH"     <<<<<=====
  
  ;; Query time: 1 msec
  ;; SERVER: 127.0.0.1#53(127.0.0.1)
  ;; WHEN: Thu Jun 13 09:52:53 AEST 2024
  ;; MSG SIZE  rcvd: 92