Appropriate mailing list configuration

[monkeypants]

We now have a private mailing list. It may not yet be fully configured. We need to ensure:

• anonymopus users can't sign up and access the archives without approval
• anonymous users can't access the archives
• anonymous users can submit HIA reports to the mailing list
• list members/moderators CAN release anonymous submissions (from quarantine) to the list