We should add IDL validation to make sure ingressAdmissionControllerTicketPoolSize parameter is always non-negative. Additionally, we might want to add a comment to the IDL file that states explicitly that setting the value to 0 will block all incoming controlled operations.