Fix #385. Use only stock prop protection.

Wherever possible, use the CanTool hook to determine whether tools are
allowed.
When a full friend list is needed, use CPPI as that's the closest thing
we have to a standard.