Status output "IPs in ban list" is misleading
It seems every connection gets (by default) 1 point; and even if setting
ban-points-connection to zero it will still create an entry (with score 0).
Counting those as "IPs in ban list" is not useful (it sounds negative, but actually isn't afaict). The number of not expired entries with a score greater than 0 and the number of actually banned IPs would be more interesting.