You might consider using the "remote" option: http://jquery.bassistance.de/validate/demo/captcha/
Or, have onSubmit submit the form asynchronously and redirect if the submit is successful. In both cases you'll want to re-validate the submittal but if it's not successful, who cares if you handle someone being an ass in a graceful manner? :) Nathan