Only restore consent state explicitly from storage.

This ensures that the remote user cannot control the consent
state (issue #383).
Add a warning comment to deter regressions.
Ignore proxy requests from users who do not have permission.

Issue #437
Merge pull request #427 from uProxy/consent-bemasc

Only restore consent state explicitly from storage.