Add @virt_memlimit, and ~documentation~.
~documentation~
Rename Sicuro::SandboxError to Sicuro::SandboxIntegrityError and ~documentation~.
Make the res_memlimit/virt_memlimit split actually work.