make sensitive operator actions auditable

[slingamn]

@mogad0n points out that an operator can use /NS PASSWD to read DMs, or exploit a different operator's credentials.

There's no real remedy for this: accreg and chanreg are the biggest hammers in the toolbox. But we can improve accountability for this by sending a snomask and logging a line for each such action.