aaronpkthat does bring up an interesting point though. once we (eventually) get private webmentions working, it might make sense to use the same authentication from there when fetching public posts, because that's a strong signal to turn off rate limiting
