Limit who can send us AXFR notify queries

Fixes #1937 and #1120
If you set it empty, you allow all notifies? =)