By the way, not sure if I've mentioned this one yet: to manage the apps that can write to your account with the MS API, go to metasmoke.erwaysoftware.com/users/apps, where you can also revoke access if necessary.
Should avoid race conditions where we're given a backoff in one request, but already have another request going out that doesn't know about the backoff.