Make it explicit that a PONG is a hop-by-hop verification of observation liveness only

[cabo]

vs. Adam's horror scenario of a proxy that pings all origin servers a client is interested in when it gets a ping from that client.