The circuit failure capping we did in legacy/trac#1984 assumed that the PID feedback would actually work. Turns out there's a few barriers to that. We should make the circuit failure stuff work a little better with descriptor bandwidth values. For that, we probably need to do something like subtract the circuit fail rate from the pid_error, not use the min().