Also miscellaneous permission-related fixes

We encrypt PMs, so if the encrypted text is truncated by mysql, the
entire message is destroyed. Truncate it before encryption so that
doesn't happen

These features only have any value if users actually use them, and
experience has shown that nowhere near enough users use them to make
them worthwhile.

This was an automatic mass-replace. Manual replacement of array(...)
will continue

ISPs can't see filenames through TLS. This option is useless in a
codebase that forces HTTPS, and only confuses users.

Tooltips: fix on user page

Fixes #27

Also file permission cleanup

This consists mostly of commits I somehow skipped over and didn't patch
into the public repo