if new_limit < 0:
            logging.warning('rejecting illegal memory_limit_gib "%s" for workspace %s', new_limit, workspace_id)
            return dict(error='illegal memory limit %s' % new_limit), 422