Mbox: https://news.ycombinator.com/item?id=7214419
Firejail: https://news.ycombinator.com/item?id=8187534