Is this right? I think we should be applying as little overload control as possible to the provisioning interface, because it's more important that requests there succeed than that they're fast.