pub const DERIVE_RATE_BURST_MULTIPLIER: u32 = 5;
Burst multiplier: each window admits five seconds’ worth of requests.