Protect usage by enforcing quotas per key.
Rate limits are enforced per key to avoid shared usage spikes.