Only restore consent state explicitly from storage.

This ensures that the remote user cannot control the consent
state (issue #383).
I see what you're saying, but after talking with Lucas it seems like we would benefit from a bigger refactor in the consent code, so I'll postpone this to a later commit.