work must carry prominent notices stating that it provides a way to exclude that entire ip from rate-limiting? i'd rather do that