Oddbean new post about login | logout Signing events uses the relay. So a policy could also affect it.
I switched to the generic ditto nginx config per the install. So no more rate limiting.
And it's still happening? We do rate limit out of the box now, so you don't need any extra hacks.