wireguard: add dos mitigation support