Sandboxing support for Rust, using the native OS facilities