nickserv/sendpass_user.c: Require the caller to know the user/email combination unless they have the user:sendpass priv. Don't leak information about if the mail was sent or not, as to not allow people to find user's emails by guessing.