Add truly permanent block for heavy abusers and make it clear that other blocks will expire on DENY_IP_LIMIT rotation.