Regarding PoW, how would this work exactly? It seems to me it's only effective if all clients opt in (If a client doesn't do you just ignore PoW for those clients? Then all spammers use that client. If you require it then you ban everyone that uses the client. Both seem bad.)