A secure application sandbox using namespaces, cgroups and seccomp