A bunch of hidden service warnings should be protocol warnings
We've had quite a few reports about log messages such as:
Possible replay detected! We received an INTRODUCE2 cell with same first part of Diffie-Hellman handshake 5 seconds ago.
INTRODUCE2 cell is too old. Discarding
These are messages that an operator can't do anything about, and they should be in the protocol warnings category instead.