Support distrust-based CKBI proxying in main Namecoin backend

There's also some skeleton code for restrict-based CKBI proxying,
which doesn't work yet.

Note that this commit will make non-Namecoin domains unusable when
used verbatim, because distrust proxying is enabled by default.  I
hope you noticed the Brainiac warnings?