fix flon_msg_handler() declaration
spec "doesn't serve msgs from unreadable domains"
spec "doesn't list msgs from off-limits execution"
add more off-limits /i/executions/... specs
let hlp_lookup_exid() return off-limits domains