Honestly though... why not just systemd containers with minimal mounts, and if you're needing an ip, what not an unprivledged LXC container? The surface area is far smaller and they're way easier to inspect.
I haven't dove into that yet! But it does look pretty danged neat. I'm really starting to realize that containership should be handled by the process manager