Add a rate limiter, use it to rate limit docker pulls.

What does this mean for a caller?  Does it imply that Accept() will always return false?