Circ fail capping should also work with descriptor bandwidth

The circuit failure capping we did in legacy/trac#1984 (moved) assumed that the PID feedback would actually work. Turns out there's a few barriers to that.

We should make the circuit failure stuff work a little better with descriptor bandwidth values. For that, we probably need to do something like subtract the circuit fail rate from the pid_error, not use the min().