Runs Firefox and other apps in a filesystem sandbox