Small and simple - each fork()/clone() is accounted
and rejected when limit is hit.