Low-level unprivileged sandboxing tool used by Flatpak and similar projects - containers/bubblewrap