should have a FD usage limitation
It is easy for the guest to make libslirp open a host socket simply by sending new connection packets.
We should probably have a configurable limitation in terms of number of sockets that libslirp is willing to open, and make it send the guest ICMP errors when that would be overrun.