[syslog-ng] Question about potential DoS condition