Configuration: max-open-files to set RLIMIT_NOFILE before switching UIDs.