Add a rate limiter, use it to rate limit docker pulls.

Also test that the next one fails - proving decrement works