[fsflover]

Another approach is to use virtualization and there will be no need to rewrite anything. See: https://qubes-os.org.