[rwmj]

See also libvirt-sandbox (in Fedora for more than a year) which lets you use either KVM or LXC to sandbox apps:

https://fedoraproject.org/wiki/Features/VirtSandbox