QUIC spam protection vs INITIAL packet spam

[nbridge-jump]

INITIAL packets have to be decrypted before they can be processed. So we need to rate limit them to avoid DoS issues.

May need a tester regardless, to verify the rate limit is effective.