Saw something last week using bubblewrap as well in hn github.com/Use-Tusk/fence