They could add registration and rate-limits