Add `--blacklist` which accepts IPs and doesn't allow them to access the service at all

[earentir]

Add --blacklist which accepts IPs and doesn't allow them to access the service at all. Again we check proxied IPs too