(_str_to_time)  Allow years to be specified.
(trigger) Make the "triggers" setting list-specific, so request
delays can be customized more easily.
(dispatch) Untaint the command mode.
Include user address in command-line parsing.
(_subscribe)  Use the minimum password length setting when
creating a new password.
Allow "all" status in the inform setting to work correctly.
(list_access_check)  Allow the "set" action to take an argument.
For example:

post
set=(delay=4h)
ALL

Allow the delay access variable to influence the time at which
an allowed request takes place.
(parse_address) Avoid errors if the value is empty.
(dispatch) Untaint the list name using valid_list.
(is_subscriber)  Consider the "MAIN" auxiliary list identical to
the main subscriber list.
(list_access_check) Include support for time checks.
(_a_delay) Set delay access variable to get correct substitutions in
the result message.
(_compile_rule)  Merge support for check_main with check_aux.
Add support for times within asterisks, similar to the digest
"times" and triggers settings.  For example,

post
set=(delay=4h), reason="Daytime messages are delayed."
*08-17*

would delay all "allow"ed messages posted between 8:00 and 17:59.
Allow time specs in the access rules.
fix major typo in "register-password", add a few cross references
(trigger) Remove extra right paren.  Thanks to SRE for noticing.
(list_access_check) Use correct list name when checking check_main.
Thanks again to SRE for on-the-spot debugging.
(_register) Correct error message.
(connect_no_parse)  Remove unwanted parentheses.
(auxwho_chunk, which) Fix syntax errors.
auto-generated help file changes for delayed tokens and enumerated options
(final help file changes, with real descriptions, to follow later)