Capsicum - practical capabilities for UNIX | Hacker News Reader