allow slightly larger widths/heights, don't raise Unauthorized when they're exceeded