Oh yeah, I missed `(2)` entirely, that allows an agency to be as capricious as they want. The previous line, "These limitations are designed to manage load on the system, promote equitable access, and prevent abuse." is much better at describing (and to some extent circumscribing) why an agency might limit access.