I used to have a cgroup just for chrome to limit how much total ram it could use because of this exact thing