Add a rate limiter, use it to rate limit docker pulls.

I guess you might want to fail here and try a local image if it exists.  Do we then need a queueing API here that says "I have no local image, I want to run, put me in the queue" to prevent DoS?