Limiting container resource usage