Or they need an agency account to bypass your limit (this is what I do with NQU Secure and what Flusk has always done)