Only restore consent state explicitly from storage.

This ensures that the remote user cannot control the consent
state (issue #383).
I'd be happier if this was something like boolean updateConsent, and explicitly set it to false somewhere else.