Implement hard limit

This patch introduces a hard limit that returns 429 instead of
simply throttling, so that a bunch of heavy users don't tie up
all our threads/greenlets/workers.