don't let recently_chosen_ntors overflow

with commit c6f1668d we let it grow arbitrarily large.

it can still overflow, but the damage is very small now.