Stuff To Consider / Implement

BLACKHOLE_SUBDOMAIN_RE
- stop onions accessing certain subdomains
BLACKHOLE_PATH_RE
- stop onions accessing certain /path/to/wherever
hardcode the requirement for "-a" onto obstart because future per-project obconfigs