Guarded by default
Every remote served through Net.Handle is metered from its first line,
whether or not you asked for it. Rank, schema, and your own checks stack on
top, cheapest first, so a caller flooding one remote is turned away before
anything expensive runs for them.