Don't allow hidden services in Tor2web mode

They're not anonymous, so let's not pretend they are.

Part of legacy/trac#17178 (moved), opening this to get a bug number.