A program to supervise a process, limit its resource usage and block unwanted system calls