[Citadel Development] (no subject)

[IGnatius T Foobar]

Ok, looks like it's the AUTH=<> that's confusing it.  stripallbut('<','>')
is grabbing the second set of angle brackets instead of the first.  We never
guaranteed a specific behavior when more than one substring qualifies.  Empty
address means an empty node name, empty node name is replaced with ours, ours
is parsed as a spoof.