Allow incoming attachment with bogus revpos (but fix it and warn)

Fixes #44