There is a bug in one of the clients that causes a lot of cross user key share requests, which then stacks up in the device_inbox for devices leading to issues on clients (potentially, maybe). These should be both relatively rare and safe to drop, so we should rate limit them.
We may also want to consider dropping key share requests to devices that already have a large (ish) number of device messages in their inbox.
We should back out #8675 after this is done.