Verify that router has sent a properly signed certificate chain.
Add missing directory authority 'gabelmoo'
Reject hostnames with suffix '.onion' or '.exit'