Server-side support for CC messages.

Internally, we store CCs as a null-delimited string of their long principals. This is a little silly, but it works because nulls are guaranteed not to show up in principal names. This works fine with non-CC-aware clients, since the format we expect the client to send recipients in is *also* a null-delimited string of principals.