Rate limiting bursty workloads