limit memory and run as tor user