Add an minimum ip-rate threshold

[lakinwecker]

The idea being that we could have a more ban-happy leroy for situations where the rate of 429s from nginx hit a certain threshold. e.g, when the 429s ramp up globally, we can be more ban happy.