Apply per-requester ratelimiting

[za419]

Collaborate with @kenellorando or provide him backend code to apply some reasonable request gating based on user IDs or other mechanisms to play nice with the backend.