Okay, nix the zip bombs. What's my obligation to treat bot-shaped traffic as something I should reply to?