o Minor bugfixes (DoS mitigation):
    - Add extra safety checks when refilling the circuit creation bucket to
      ensure we never set a value that is above the allowed burst. Fixes
      ticket 25202.