but basically, some isolating container format w/ non-privileged runs and potentially strict network ACLs