Capsicum is a lightweight OS capability and sandbox framework implementing a hybrid capability system model.