verify application name, version and check if declared address matches the remote address of an outgoing connection before promoting peers from candidate to known.
don't blacklist peers in case of a connectivity issue.
resolve all addresses from a known-peers domain name.
min-connections.known-peersdomain name.