The new fill() sets each hoppings only once.

The filling starts now at (one or multiple) sites, not at a domain.
This is more consistent, since the flood fill works on the graph of
sites.

Other changes:

* max_sites is now the maximal number of sites that is still OK
* fill() no longer raises an exception when no sites were added, it
  warns now.