You can mount the socket and xauthority of a xephyr window instead of your root X server.