Allow clients to cap number of STRs requested in one request

[masomel]

The idea here is that clients can specify a maximum number of STRs they want to receive from a server/auditor in one request, possibly based on the size of an STR, as a bandwidth optimization.