I think we need three modes (global, and then per-correspondent, defaultig to 'try' for all): don't do otr try to do otr refuse to send messages unless otr is set up