Fix the visibility of bcc-recipients, so that the same rules are used

everywhere.  Tighten the rules so that secret info cannot leak through
get-text-stat.  Re-indent text.c.  Add a few const qualifiers all over
the code.