make mod_muc and mod_muc_log a vhost-config again
use local instead of all acl, stripping anon_jabber_at of a few more permissions
more explicit deny of anon_jabber_at