Also move UserException into nfw_database where it should have been all along
Move DuplicateHostnameException into the module that uses it
On second thought, don't need to set expiry when rejecting