Our connection_storm workloads started failing after increasing our static queue length for CRL. We think there might be a bug in the token bucket implementation that leads to potentially faulty token accounting for jobs on the queue that expire (either maxTimeMS for IRRL, or client timeout for CRL) that may lead to admission storms.