The only real way one can mitigate sybil attacks is to permit private nodes.