Privacy stuff (not full but just to enable /contact for now)

So, this should be mostly working, but we still need to set the visibility for replies to match the visibility of parent comments for now
ah. makes sense. Can you rename it to 'exprCommentRootPostedBy' and put a comment above: "Is the root (earliest ancestor) of this comment posted by the given user?"