added `nproc` to the resources that can be controlled with setrlimit