modify resource.setrlimit() to run in VM