Document the --keep-fd option.
Introduce the --read-only option to make the file system read-only.
Introduce the --set-env option

This option allows setting environment variables for the child on the command
line. Also reorganize env.c a bit.
Clean up main.c, move the appjail main function into appjail.c