I like the idea of a greylist. (Do these have a different name now that we shifted to allowlist/denylist?) I strongly suspect a lot of agents would just follow the instructions well enough to bypass and land in my inbox anyway.