Prevent replacement nodes from skipping bootstrapping without allow_unsafe_replace:true

I've noticed that when replacing a node with replace_address it can skip bootstrapping if it is listed in its own seed list. This probably shouldn't be allowed without the allow_unsafe_replace option set to true as is required when using auto_bootstrap: false in combination with replace_address. Patch here and an attempt at a dtest here.