This is a nice application level sandboxing feature on Linux. We should probably have more applications use it.
