Move ratelimits into map lookup fn to reduce BPF verifier instructions