Update design_principles.md

Noted that rate limiting is now enforced for all organizations, per OKTA-44908.