support for a "systemwide" ulimit in the conf... instead of needing a wrapper