Change the logic so we never full-refresh on error, and we also don't full refresh every 5000 requests.

For now, the parameters are undocumented, but we add the parameters:
    refreshCount (default: 0)
    errorCount (default: 0)

so we can turn on the old behavior if needed (refreshCount=5000, errorCount=10).