If folks are in a situation where they are vulnerable to this

@zwass pointed out that

--tls_server_certs

is likely a good mitigation. It’s not perfect for cases where your provider is managing the certs, but it does help