Add a rate limiter, use it to rate limit docker pulls.

ok.  milliQPS? :)  j/k