Ephemeral Docker jails for running untrusted Ruby code