The way to do it would be to outlaw any protocol that can encapsulate to a point that off the shelf DPI can't read it.