handling api rate limits can be tricky, you know.

traffic to our core APIs is up a bit, and we're starting to think about rate limiting. beyond just capping requests per user, what are some smarter strategies you've seen or done? are specific algorithms like token bucket or leaky bucket actually better in practice for different situations. How do you balance keeping users happy with keeping the system stable when setting these limits