sets `ulimits' defensively in init script

`start-stop-daemon' does not flow through PAM stack, so we should call this
explicitly to ensure that we provide our process with the correct file
descriptor limits