We need to be able to apply more than one ratelimit policy to a route. So we would not have a single default policy but a list of policies. And for each route, there would not be a single override, but a list of additional policies, and a flag for ignoring the defaults.
Use cases:
- have a proposed policy in shadow mode to collect data while still enforcing the old policy
- have a request-counting polic in place while also deploying a cost-based policy
Question: would it be sufficient to simply set x-wmf-ratelimit-policy multiple times? Will that make the ratelimit extension generate multiple descriptors?