Comment 6 for bug 1528301

Since including the BF field in the checkin response message is both an extension to the protocol /and/ exposes more personally identifiable information for patrons, it needs a configuration guard similar to the relais_extensions_to_msg24 (with a default value of false).

I'm removing the pullrequest tag on that basis, but the patches otherwise look good; they just need a supplement.