Per-Client captcha options

For certain clients we trust enough to figure out the 'realness' of the user by other means, it should not be necessary to require the captcha. One example is mobile clients.

The captcha requirement should be possible to override per app client.