ACL fixes in core

My recent change (49258153202cfa131ef40d687ca08bc97f26f4aa, part of #1893) to deliver admit's details to the modern admit_ips and admit_hostnames infrastructure overlooked the difference in of non-literal handling host-names.  So I set out to fix that, got confused about which direction I was mapping (dot-subnet to regex was needed, but I'd managed to implement the (much harder) reverse before I realised my mistake) and there was a TODO asking for the reverse anyway, so I ended up implementing both.

One of the functions I needed wouldn't let me pass it a `const char *` so I paused to add constness to a bunch of functions that should have had it.
You know that code better - go for it !