Privacy stuff (not full but just to enable /contact for now)

So, this should be mostly working, but we still need to set the visibility for replies to match the visibility of parent comments for now
No, it's "the root of this comment was posted by..." - which is the check you described but then also an "or the ancestor without a parent was posted by by me"