- data dirs to mount on startup (only applies to a small number of users) - requests cpus and ram (use cgroups to enforce) and add reasonable maximums