Privacy stuff (not full but just to enable /contact for now)

So, this should be mostly working, but we still need to set the visibility for replies to match the visibility of parent comments for now
because the only people who can't reply are logged-out users, and showing the reply to them means they can click it and be prompted to log-in, thus inviting them to reply rather than not showing it.