Self-hosted rate limiting