http2: mitigate reported DoS attacks
Moving from https://github.com/nodejs-private/node-private/pull/172 as discussed in the TSC meeting for tomorrow’s security release. See the commit messages for details. @trott and @jasnell already gave approvals.