Limiting resources consumed by a container