wireguard: add handshake rate limiting support