I think we should leave this validation to the server side. If we choose to allow larger limits, I'd prefer to not have to release a new client to support the elevated limit.