[auth] Limit Unit Usage to Prevent RPC DoS

[patrick-ogrady]

If we want to add cool auth modules (like Program-based), we will need to make sure we can properly meter their usage to prevent RPC DoS.

[github-actions]

This issue has become stale because it has been open 60 days with no activity. Adding the lifecycle/frozen label will exempt this issue from future lifecycle events.