The rate_limit endpoint is pinged before any authorization, so for private repos with SSO/SAML, it appears this plugin can't be used. An option to bypass this check and use a default rate would be nice.