SECURITY: Rate limit moves via the API