Added initial implementation of confine API based on CGIs