ACL fixes in core

My recent change to deliver admit's details to the modern admit_ips and admit_hostnames infrastructure overlooked the difference in of non-literal handling host-names.  So I set out to fix that, got confused about which direction I was mapping (dot-subnet to regex was needed, but I'd managed to implement the (much harder) reverse before I realised my mistake) and there was a TODO asking for the reverse anyway, so I ended up implementing both.

One of the functions I needed wouldn't let me pass it a `const char *` so I paused to add constness to a bunch of functions that should have had it.
@jimis - we only do this for old admit hostnames; why don't we also do it for the modern admit_hostnames's entries as well ?