Proposal: Allow setting ulimits for containers

Add option to set ulimit settings for containers.
Currently the container inherits from the daemon's ulimit settings.
Unintended wrapping?