Penalize spammers

Currently, we are only penalizing users that are reported by their already known connections.
As `requestProof` is added the connections that can be used to prove the other side sent the connection request, we can start penalizing spammers without relying on the existence of the other side connection and its level.