Oh, and that's also why I chose 1/5th of the total block sigops rather than trying to pick a more exact number closer to the absolute limit: Why invite attackers to exploit edge cases I didn't think of? Five transactions is a lot more margin than trying to get exactly one.