Package netlimit bounds the number of connections accepted across one or
more listeners. Pending clients remain in the kernel listen backlog and do
not consume a process file descriptor until a shared slot is available.
Wrap returns a listener whose accepted connections hold one shared slot
until Close. The slot is acquired before Accept, so accepted process FDs can
never exceed Capacity even when multiple wrapped listeners are serving.