improve IP cloaking with a salt

We have had this new `ip_cloaking.c` lying around here we wanted to discuss.

We still have to test this, and it's probably not backwards-compatible (so bans will fail), but it's a start of a better default host mangling.

Comments?