I've also gotten good results just dropping the connection if it hits the application layer, and you can't get CloudFlare to return the desired behavior first.

I've also gotten good results just dropping the connection if it hits the application layer, and you can't get CloudFlare to return the desired behavior first. Not ideal, but it seems to work against primitive bots.