* add drone.slice (control resource usage)
* restrict can be accessed by the service
* adjust IO priority and NICEness of processes created withing the
service
* use "-p" with docker-compose invocation to specify a project that the
newly-spawned containers belong to (best practice)
* add commented override
