Determines how rate limiting is applied. By default if not specified, rate limiting applies to the clients IP address.