It is possible to set dynamic metadata from external authorization service responses, but not from the ratelimit service. Let's make it possible in the ratelimit service. This will allow users to log that metadata in the access log, or pass the metadata along to other filters to do interesting things.