Without them replace_params: false was ignored when strict is off, so conn.params got atom keys and RateLimiter params: ["id"] buckets collapsed to one per user.