Module limit 

An in-memory token bucket per key (an email, an IP), to blunt password guessing. It resets when the daemon restarts, which is fine: the point is to make online guessing slow, and a restart is rare and visible.

Structs

Rate

burst attempts at once, then one every per_secs.

RateLimiter