Unprivileged sandboxing tool, namespaces-powered chroot-like solution
