* we still keep a global limit on the maximum number
* we will create. Don't allow a nonprivileged user
* to exceed its current limit or to bring us within one
* we still keep a global limit on the maximum number
* we will create. Don't allow a nonprivileged user
* to exceed its current limit or to bring us within one