The meatspace firewall for sudo room