Sandboxing support for Rust, using the native OS facilities - View it on GitHub