[Gargyle]

X Display Access ~ RCE

[Arnavion]

You can mount the socket and xauthority of a xephyr window instead of your root X server.