Forbid protocol version rollback.

When we know a node's ECDSA key, we only allow communication via the SPTPS
protocol.
Allow extra options to be passed to "tinc restart" again.