JA4 is available as a client identifier in service policies, but not rate limit policies. Requesting this be added.
You won't be notified about changes to this idea.