The rate limiting on the API call is currently applied also to calls coming from us, and most notably icinga checks and AJAX call from the main website. We should whitelist them.