3 ms·

Wouldn't it be possible to limit that by cgroups/namespaces? Possibly remounting everything as read-only.