then again with plan9 namespaces it's trivial to build sandboxes.