@jollyrogue
When I tried limits.conf it seemed only to be read for login shells. Using SGID + limits.conf would be the best solution, if it works; so I'll try once again