The sendq limit is now soft, now we halt processing if a sendq is exceeded, until it is sufficiently drained. This allows us to implement SAFELIST and other floody commands without hacks.