Currently the user can supply num_kfrags < threshold, rendering the resulting kfrags useless. We can pass overhead (or some other name) instead of num_kfrags, and return threshold + overhead kfrags. If both threshold and overhead are unsigned, it will be impossible to create a set of useless kfrags.