What could work instead is something where you run a command like `opensnitch-context dev` and it would talk to the running daemon to do proper authentication (

What could work instead is something where you run a command like `opensnitch-context dev` and it would talk to the running daemon to do proper authentication ("do you want to allow this context to be used?") and then hopefully some other magic (cgroups?) to know if the processes are part of that context even if they are sparse/nested child processes.