I think this is challenging. The Bitcoin.com faucet had to be shut down because of abuse. The cat-and-mouse security model you propose is expensive and not convincing to me.
When was it shut down? I just used the faucet the other day and it gave me more BCH than I'm proposing to give.