Yes, this is a big one. I run full system containers on my Linux boxen with systemd-nspawn, and on macOS, with their system level protections, I suspect even ch

Yes, this is a big one. I run full system containers on my Linux boxen with systemd-nspawn, and on macOS, with their system level protections, I suspect even chroots would be too much to ask. (Maybe it's possible, I just haven't had that many disposable hours to check just how much pain it would be for quite a while.)