There's the traditional webmin-like console where you can install "apps", all NAS have something like that but it requires that all apps are trusted to be secur

There's the traditional webmin-like console where you can install "apps", all NAS have something like that but it requires that all apps are trusted to be secure. This looks like a model that would go beyond that and provide a sandbox with capability-sharing mechanism.