We are using SpikeArrest policy, with: - identifier as ClientID (fetched
from request.header.client_id) - value is a variable (we are keeping
endpoint-to-value mapping in a KVM) This way, we are enabling
SpikeArrest value for endpoints to be changed,...