Strapi ratelimit only half

interesting enough, by using plugin::users-permissions.rateLimit alone gives the correct number of requests: blocked after 5 req.