A7c2) DNS penalty for pre-signing attempts.

Implements #63.