onion services are vulnerable to a resource exhaustion attack that Tor can't patch