Privacy modes: hash, encrypt or don't store emails

Administrators can now choose how verified addresses are stored, with configurable retention and auto-deletion.