ParentFull threaddrran·Separate user for untrusted apps is the proven way to do that in UNIX. :-/View on HN