[CentOS] prevent runaway PID taking down server (RAM/swap)