curl /rate-limiting returning 403 instead of documented behaviour

[qw-in]

Seems like it may be taking requests to other endpoints into account for the rate limit