I know this is preexisting, but seems like a pretty extreme measure. In fact, it kinda makes the DoS effect much worse. Not only can you not connect anymore, but the server has in fact died. Any thoughts?

I like the CFEngine lingo btw, "apoptosis"... :-) We might think about changing it to something a little less cryptic.