I'd be parsing out wildcards, boosts, and fuzzy searches (or at least thinking about the effects). I mean "jakarta apache"~1000 or roam~0.1 aren't as efficient as a regular query.
Even if you leave the solr instance public, you can still limit grossly inefficent params by forcing things to use the dismax query parser. You can use invariants to lock what options are available.
I suppose we don't have a way to say the *maximum* number of rows you can request is 100 (or something like that)
ryan
