rlimits: make sure ->rlim_max never grows in sys_setrlimit