Run the tests with a non-root user.

Also limit the number of processes a source can create.

Group the sandboxed processes into a separate process group, so that they can be killed together.