Lightweight process jail using LD_PRELOAD