Separate the initial admin account from system message delivery

Drop the rather odd configuration.base.ADMINISTRATORS in favor of a
simpler configuration.base.SYSTEM_RECIPIENTS which is (also) only used
when sending system messages (such as automatic crash reports.)