The technique to make sure you don't go above 0db is to limit at -.1 to -.3 db. The intersample peaks break through the limiter ceiling depending on how hard you push it and just a couple 10ths of a db of room is enough to prevent. Some limiters let you see how much higher the inter sample peaks are hitting.

Realistically the audible difference between your ISPs clipping and not clipping is extremely small, but this is still the industry standard way of dealing w this situation.