A secure application sandbox built with modern Linux sandboxing features