a tiny, custom launcher that handles namespacing, control groups, chroot'ing, and more