Run foreign binaries using POSIX sandboxing features