allow custom ulimit -n for Docker