In your custom plugin -- when setting the session for a valid request, simply add the "rate_limit_pattern" key into the metadata, with the unique key that you want Tyk to track a rate limit for.
This may be one user, a collection of users, an app, etc.