Configurable resource limits for decoding, to prevent denial-of-service attacks.
All limits have sane defaults and can be overridden per-decoder instance.