i've pushed this now.  people are building on hardened systems w/out
needing to call setrlimit, so presumably things are OK.  if/when it
becomes an issue, we can re-add the code then.  as-is, i'm wasting
time rewriting dead code (e.g. the string handling w/hexify, and i
started to rewrite it even more to use binascii).
-mike