Enforce sane maximum for BATCH_SIZE

We don't enforce maximums on BATCH_SIZE. Setting a very large value could cause strange behaviour like crashing, hanging, excessive memory usage, spinning etc.

I think a limit like 65536 (64x the default) would be reasonable but it's worth discussing further.