This is completely untested, and the syntax may be wrong, so not ready to be merged.

I didn't actually plan on removing auth.

use raise_error, fixed double $

I'm not sure if this is all of the api that is required.

Get mailfilter to not block outgoing email.

Get logging to work reliably in the python scripts

I think we can merge this and improve it from there.

This may have been discussed elsewhere, but is it actually desirable to have per-user overrides of mail delivery policies?
The external sender warning seems like something potentially security critical that you don't want to have disabled on a per user basis.
The per user setting of the invitation policy is perhaps less critical.

To support delegation, the reject_sender_login_mismatch check has been
removed, so we rely on the access policy to check sender address
ownership.

renamed scripts, remove mention of spf

I like the registerRoutes() approach.

Let's merge it an take it from there.