feat(systemd): add some cgroup limits

Limit locksmith to some really small amount of CPU shares and a small
amount of memory.
Merge pull request #17 from philips/add-cgroups

feat(systemd): add some cgroup limits