it's what the relay should do if the clients don't respond with auth, to conserve resources
yeah, or you can just rate limit at the http level or firewall level which might serve more resources