What is one way to mitigate spanning-tree compromises?