Add a rate limiter, use it to rate limit docker pulls.

I think this is a fine approach as long as you don't have too many of these and it is for low qps.  No need to kill ourselves on a super-duper implementation now.  Just make sure that the documentation is clear on it.