Add rate-limiting to the Rendezvous experimental endpoint

[anoadragon453]

Implemented in #17056, the endpoint for starting a rendezvous endpoint currently has no rate-limiting. Since there is a cap to the number of concurrent rendezvous sessions, this could technically allow a DoS where a user creates many sessions, forcing other legitimate sessions to expire.