Future options to -j TARPIT:

- allow tuning of 1*HZ per-host ACK rate-limit
- randomly don't ACK with user-specified frequency for each of exceeding
  rate limit and not
- randomly issue FINs with user-specified frequency for each of exceeding
  rate limit and not