Resource limits

To keep the database responsive for everyone, each connection has a small budget of work per 30-minute window. Normal browsing and lookups never come close; the budgets only stop sustained automated abuse. When a budget is used up, requests are declined until the window resets.