Obviously this is tightly locked down with cgroups.
As for having more users than sockets, is that really likely, considering there are 64000 available ports?
