duration of one rate-limit window in milliseconds (default: 1 000 ms = 1 s)
injectable clock; override in tests to control time deterministically