I'd still prefer to put a config enforced limit in place. So we can guarantee how many contact keys at most will be returned. If the command specifies fewer than that then we can return a subset.