You are describing sandboxing and it's completely orthogonal to containers.