Permission denied is raised when provisioning an instance goes over quota

[mkjpryor-stfc]

When attempting to provision an instance that goes over a quota, the OpenStack API raises permission denied rather than something sensible like a 409 Conflict.

We need to catch this and return something more sensible as the UI currently boots people out for this.