Protects expensive controller actions from thundering-herd overload by queuing overflow users, issuing signed admission tickets, and letting users wait on a lightweight Engine-provided page.