Add the ratelimit ACL condition. This is mostly reasonably self-contained