Change the default for <security:customversion> to an empty string.

RFC 1459 says this field is for comments about the version. If the
operator has no comments then we should not show any.
Prevent servers from ulining themselves.

Almost every single case I have seen where this has been done has
been an accident.
Replace range() with min and max arguments on getInt().
Rename <options:moronbanner> to <options:xlinemessage>.

This name is more descriptive of what is actually is used for.
Require privs given on initial join to be in <options:defaultmodes>.
Add <path> keys for all of the compile-time paths.

Also, make all paths in the config relative to their associated
directory. This reverts a change in 2.0 which turned out to be a
terrible idea, especially for system-wide installations.