Any user with SCHEDULER permissions (tryjob access) can take LUCI down by scheduling thousands of builds and saturating capacity. We need to implement API quotas.

P3 because a quota server is a major effort and currently there is no plan to implement it. We should implement auto-deployment first (SRE are working on this)

context: go/chops-pm-110