In this case, one could ask for each value (or only the ones under attack) twice:
- ask value, return to requester with short TTL (a few seconds)
- wait a bit
- ask value again, if matches use given TTL (or limit it to a few hours)
Anyway, it seems the solution is in the repetition, to decrease the probability of success of
the attack.