Outsource heavy-weight and risky rendering to segregated, unprivileged daemons.