Agents can currently send negative transaction and span durations to the APM Server, which will happily record them. We should either reject them, or clamp them to zero.