Limit the maximum number of Model errors to a reasonable value.

Fixes #490