Lower ulimit to match docker's default