I found this bug report from someone else having similar problems: https://bz.apache.org/bugzilla/show_bug.cgi?id=63948
From the comments in that report, it looks like Safari is also tripping the abusive behavior detection. Rather than disabling it, by setting overheadDataThreshold=“2048” everything now works as expected.