Add a rate limiter, use it to rate limit docker pulls.

I feel like you could do this all without a goroutine by just subtracting the last approval time from now and dividing.  This is an elegant solution if you really want smoothed traffic - is the elegance worth the cost of the goroutine (i.e. the need for a Stop function)?