WANT_SUSPEND = ($(WANT_SUSPEND)) || ($(SUSPEND))
 
+# In case group-quotas are being used, trim down the size
+# of the "pie" to avoid double-counting.
+GROUP_DYNAMIC_MACH_CONSTRAINT = State =!= "Owner" && Cpus > 0 && MY.CAN_RUN_WHOLE_MACHINE == False
+
 {endcode}
 
 Instead of suspending the whole-machine job until single-cpu jobs finish, we could instead suspend single-core jobs while whole-machine jobs run.  Replacing the SUSPEND expression above with the following would achieve this policy.  Beware that this could cause single-core jobs to be suspended indefinitely if there is a steady supply of whole-machine jobs.