fault-inject: add ratelimit option