protocol/ngircd: add support for SSL-only cmode in MLOCK
protocol/ngircd: ngircd supports +qaohv now
protocol/ngircd: map umode +q to UF_IMMUNE to not enforce akicks against unkickable users