Expand use of bonus multiplier, fix regressions

The bonus multiplier is now used to derive penalties for, e.g.,
Crackdown.  For example, the penalty factor per attack under Crackdown
is equal to SqRt(bonusMultiplier).