Seems to me you could just patch the library that handles the secure renegotiation for an option to keep stats on reneg per client so you can put a threshold for reneg handshakes per X time. Any more than 100 renegotiated handshakes in 10 minutes sounds excessive to me (but i'm not sure how often they're used in the real world)