Document strict trusted-proxy configuration requirements to avoid spoofed client IP forwarding affecting abuse controls.