Make is_sensitive_dir_purpose and purpose_needs_anonymity consistent

I'm not sure why these both exist, but it's very confusing.