Handle public response emails differently from public ones

* Prefer a direct email address (if given) rather than the public remote email address for sending replies
* Don't include private detail in emails sent to a public address
* Restrict the `private_part` response field in the admin screen if there isn't a suitable email address to send private information

Closes #218