Enforce virtual memory limits with cgroups #4417

This relies on the value of the slot's VirtualMemory
attribute, and uses it to set the memory + swap limit
with cgroups.
Version history for #4417