Add a rate limiter, use it to rate limit docker pulls.

added docs (and yes, we do)