@riking bingo; hide DMs by default, allow a toggle on that makes an audit in the audit log, for these situations where it's necessary.

this was basically one of the first things suggested in the now closed issue in mainline

@KS similarily discourse really doesn't want to do this for some reason? even though it's as easy as (1) running the access checks twice (2) include a boolean in the json (3) render an interstitial on the client

@KS they even have "messages are visible to mods while there is an active flag anywhere on it" already, too