Validate incoming padding, and permit it when it is valid.

This MR permits incoming padding when a padding framework is installed for a given hop, and the padding does not exceed a give ratio. It rejects padding otherwise.

The ratio algorithm is a placeholder; we'll want per-machine algorithms when we deploy.