Provide an effective captcha when the client is listed as "suspicious", to give a last chance to real users.