implement configurable blocking of requests when the server is too busy: issue #2722
loadgen fixes and improvements:
  * defend against double callback invocation in wsapi_client for network errors
  * display average request latency in loadgen output
  * fix unhandled exception when cert_key API fails
  * handle 503 errors at any point, not just in auth responses.