When enabled, automatically mitigate random-prefix attacks to protect upstream DNS servers
Only mitigate attacks when upstream servers seem unhealthy