to prevent spam and DDOS. a cost based query system needs to be implemented
- decorator on queries/mutation in graphql schema to add the cost value
- if a request exceeds X amount of points (cost) then reject the entire request
- depth limit and max cost must be configurable with good default