We've enabled support for JWT on the upload cluster, which means that we can relax our VCL ratelimits for users that supply the tokens (similar to how we do it with the text cluster)
As this requires changing business logic, remember to loop in the product people of changes