Enforcement of the default limit from the config is handled in the rest API handlers, since that way we can use the default limit to min/max the query passed by the user too.

This was just an arbitrary default value for the model to make sure that some limit number is passed, since it is used in the cql query.  This API is internal, so it seemed unnecessary to do the limit check both in the rest handler and in the model a second time (since the only thing that will call this is our internal code).